diff --git a/lib/hx509/keyset.c b/lib/hx509/keyset.c
index f3ca7c0bf..2afef44c8 100644
--- a/lib/hx509/keyset.c
+++ b/lib/hx509/keyset.c
@@ -108,7 +108,7 @@ hx509_certs_init(hx509_context context,
     ret = (*ops->init)(context, c, &c->ops_data, flags, residue, lock);
     if (ret) {
 	free(c);
-	return ENOMEM;
+	return ret;
     }
 
     *certs = c;