diff --git a/lib/hx509/crypto.c b/lib/hx509/crypto.c
index 11ce16a8c..e72d27630 100644
--- a/lib/hx509/crypto.c
+++ b/lib/hx509/crypto.c
@@ -375,7 +375,7 @@ dsa_verify_signature(const struct signature_alg *sig_alg,
     spi = &signer->tbsCertificate.subjectPublicKeyInfo;
 
     dsa = DSA_new();
-    if (dsa)
+    if (dsa == NULL)
 	return ENOMEM;
 
     ret = decode_DSAPublicKey(spi->subjectPublicKey.data,