Check return value of ECDSA_Verify() correctly

diff --git a/src/libstrongswan/plugins/openssl/openssl_ec_public_key.c b/src/libstrongswan/plugins/openssl/openssl_ec_public_key.c
index c8a45f79addaec6ceba8e84df3b4d574ae151ad8..38cc8bedf0f21d453784e081d0f2c6943105dc85 100644 (file)
--- a/src/libstrongswan/plugins/openssl/openssl_ec_public_key.c
+++ b/src/libstrongswan/plugins/openssl/openssl_ec_public_key.c
@@ -124,7 +124,7 @@ static bool verify_der_signature(private_openssl_ec_public_key_t *this,
        if (openssl_hash_chunk(nid_hash, data, &hash))
        {
                valid = ECDSA_verify(0, hash.ptr, hash.len,
-                                                        signature.ptr, signature.len, this->ec);
+                                                        signature.ptr, signature.len, this->ec) == 1;
                free(hash.ptr);
        }
        return valid;