crypto: Explicitly check for RSA Key

If the SSL peer is using a non-RSA key (such as ECDSA), the call to
EVP_PKEY_get1_RSA sets an OpenSSL error code that may be interpreted
by some later call as a legitimate error.  This results in connection
resets.  Explicitly checking bypasses this condition.