diff --git a/lib/hx509/keyset.c b/lib/hx509/keyset.c
index 79a9beb0c..01772d249 100644
--- a/lib/hx509/keyset.c
+++ b/lib/hx509/keyset.c
@@ -83,7 +83,9 @@ hx509_certs_init(hx509_context context,
 
     residue = strchr(name, ':');
     if (residue) {
-	type = strndup(name, residue - name);
+	type = malloc(residue - name + 1);
+	if (type)
+	    strlcpy(type, name, residue - name + 1);
 	residue++;
 	if (residue[0] == '\0')
 	    residue = NULL;