crypto: fix possible security issue where errors from openssl would return an invalid signature.  The return from EVP_VerifyFinal can be 1 for valid, 0 for invalid or -1 for error; as it was, the error condition was equivalent to valid.