pkcs1-pad self-check fails?

[Nikos Mavrogiannopoulos]

Simon Josefsson wrote:

> Thanks.  I think the problem is that the PKIX chain used to be rejected
> (in 2.8.x) because the signature validation fails, but now the entire
> chain is accepted.  Presumably the particular signature is no longer
> validated.  That could be wrong, or there is a problem in that self
> test.

I fixed the chain verification to behave as it used to be.

regards,
Nikos