diff --git a/examples/server.rs b/examples/server.rs
index 52d268ad3..368619269 100644
--- a/examples/server.rs
+++ b/examples/server.rs
@@ -25,7 +25,7 @@ fn main() {
         pemfile::rsa_private_keys(&mut reader).expect("cannot read private keys")
     };
 
-    let tls_config = quinn::tls::build_server_config(certs, key[0].clone());
+    let tls_config = quinn::tls::build_server_config(certs, key[0].clone()).unwrap();
     env_logger::init();
     tokio::run(quinn::Server::new("0.0.0.0", 4433, tls_config).unwrap());
 }
diff --git a/src/tls.rs b/src/tls.rs
index fd5b3208e..47bdba1ed 100644
--- a/src/tls.rs
+++ b/src/tls.rs
@@ -46,12 +46,15 @@ pub fn server_session(
     ServerSession::new_quic(config, to_vec(params))
 }
 
-pub fn build_server_config(cert_chain: Vec<Certificate>, key: PrivateKey) -> ServerConfig {
+pub fn build_server_config(
+    cert_chain: Vec<Certificate>,
+    key: PrivateKey,
+) -> QuicResult<ServerConfig> {
     let mut config = ServerConfig::new(NoClientAuth::new());
     config.set_protocols(&[ALPN_PROTOCOL.into()]);
-    config.set_single_cert(cert_chain, key);
+    config.set_single_cert(cert_chain, key)?;
     config.key_log = Arc::new(KeyLogFile::new());
-    config
+    Ok(config)
 }
 
 pub fn process_handshake_messages<T>(session: &mut T, msgs: Option<&[u8]>) -> QuicResult<TlsResult>
@@ -154,6 +157,6 @@ pub(crate) mod tests {
             pemfile::rsa_private_keys(&mut reader).expect("cannot read private keys")
         };
 
-        super::build_server_config(certs, keys[0].clone())
+        super::build_server_config(certs, keys[0].clone()).unwrap()
     }
 }