Check self-signed certificate names and signatures

net/cert/x509_certificate_openssl.cc

Index: net/cert/x509_certificate_openssl.cc
diff --git a/net/cert/x509_certificate_openssl.cc b/net/cert/x509_certificate_openssl.cc
index dc1b4ee6244901ac2bb006e04933903455df05a7..4809b4529da3ec65f60ce05b2dfa62e2f865a946 100644
--- a/net/cert/x509_certificate_openssl.cc
+++ b/net/cert/x509_certificate_openssl.cc
@@ -456,9 +456,9 @@ bool X509Certificate::IsSelfSigned(OSCertHandle cert_handle) {
   crypto::ScopedEVP_PKEY scoped_key(X509_get_pubkey(cert_handle));
   if (!scoped_key)
     return false;
-
-  // NOTE: X509_verify() returns 1 in case of success, 0 or -1 on error.
-  return X509_verify(cert_handle, scoped_key.get()) == 1;
+  if (!X509_verify(cert_handle, scoped_key.get()))
+    return false;
+  return X509_check_issued(cert_handle, cert_handle) == X509_V_OK;
 }
 
 }  // namespace net