--- lib/dns/opensslrsa_link.c 2006-11-07 16:28:49.000000000 -0500 +++ lib/dns/opensslrsa_link.c.oden 2009-02-15 05:48:05.000000000 -0500 @@ -246,7 +246,7 @@ opensslrsa_verify(dst_context_t *dctx, c status = RSA_verify(type, digest, digestlen, sig->base, RSA_size(rsa), rsa); - if (status == 0) + if (status != 1) return (dst__openssl_toresult(DST_R_VERIFYFAILURE)); return (ISC_R_SUCCESS);