diff --git a/daemon/dtls.c b/daemon/dtls.c
index d6cf626e3..f76c4772e 100644
--- a/daemon/dtls.c
+++ b/daemon/dtls.c
@@ -216,6 +216,7 @@ static int cert_init(void) {
 
 	if (!EVP_PKEY_assign_RSA(pkey, rsa))
 		goto err;
+	rsa = NULL;
 
 	/* x509 cert */