diff --git a/lib/hx509/test_nist_cert.in b/lib/hx509/test_nist_cert.in
index 2ee5857ec..3efbad3d2 100644
--- a/lib/hx509/test_nist_cert.in
+++ b/lib/hx509/test_nist_cert.in
@@ -45,6 +45,7 @@ if ./hxtool validate DIR:$nistdir/certs > /dev/null; then
    :
 else
    echo "validate failed"
+   exit 1
 fi
 
 exit 0