crypto: fix RSA signature validation

There existed a potential security hole whereby openssl reporting an
error would result in node reporting the signature to be valid.

The return value from EVP_VerifyFinal() can be 1 for valid, 0 for
invalid or -1 for error.  It should therefore be tested for == 1, not
just != 0.