Just to have posted it here, I wrote a tool: https://verify.funfedi.dev/
that allows you to check that your implementation meets the minimal requirements regarding:
- HTTP Signatures
If you visit http://funfedi.dev you can find more stuff and how to run it locally.
I’m happy to answer questions