Glen Lumanau

The DSA_do_verify() function from OpenSSL is used to determine if a DSA digital signature is valid.  When DNSSEC is used within BIND it uses DSA_do_verify() to verify DSA signatures, but checks the function return value incorrectly. How to upgrade it?