Add the necessary SSL_CTX_check_private_key call and error handling.
Tentatively bump the required version of cryptography necessary for the new OpenSSL API.