RSA_check_key() may return -1 if it fails