`i = NETSCAPE_SPKI_verify(spki, pkey) > 0;`?  Right now, VerifySpkac() returns true when NETSCAPE_SPKI_verify() returns -1.