RSA_encrypt and RSA_sign_raw aren't the same.

Change-Id: Ie09ab12baf59b8c1d628396424ce6cadf43bf0e1
Reviewed-on: https://boringssl-review.googlesource.com/1913
Reviewed-by: Adam Langley <agl@google.com>

crypto/evp/p_rsa.c

diff --git a/crypto/evp/p_rsa.c b/crypto/evp/p_rsa.c
index bcaca4b5..1c42fbd 100644
--- a/crypto/evp/p_rsa.c
+++ b/crypto/evp/p_rsa.c
@@ -207,8 +207,8 @@
         if (!setup_tbuf(rctx, ctx) ||
             !RSA_padding_add_PKCS1_PSS_mgf1(rsa, rctx->tbuf, tbs, rctx->md,
                                             rctx->mgf1md, rctx->saltlen) ||
-            !RSA_encrypt(rsa, siglen, sig, *siglen, rctx->tbuf, key_len,
-                         RSA_NO_PADDING)) {
+            !RSA_sign_raw(rsa, siglen, sig, *siglen, rctx->tbuf, key_len,
+                          RSA_NO_PADDING)) {
           return 0;
         }
         return 1;