Call ERR_peek_error instead of ERR_peek_last_error

The latter isn't available in older OpenSSL versions, and is
less useful since it returns the most recent error instead of
the first one encountered.