Handle PKCS12 decrypt failures with OpenSSL 1.0.1j

Don't know why this changed, but it did.