joyent/node — pull request #5219 by smbz (2013-04-04 15:48:35+00:00)
Title: crypto: fix RSA signature validation

There existed a potential security hole whereby openssl reporting an
error would result in node reporting the signature to be valid.

The return value from EVP_VerifyFinal() can be 1 for valid, 0 for
invalid or -1 for error. It should therefore be tested for == 1, not
just != 0.