diff --git a/lib/hx509/crypto.c b/lib/hx509/crypto.c
index 03e3dfb66..b203ec389 100644
--- a/lib/hx509/crypto.c
+++ b/lib/hx509/crypto.c
@@ -639,7 +639,8 @@ rsa_verify_signature(hx509_context context,
 
  out:
     free_DigestInfo(&di);
-    RSA_free(rsa);
+    if (rsa)
+	RSA_free(rsa);
     return ret;
 }