diff --git a/src/ssl_load.c b/src/ssl_load.c
index dc652748c..5b995f013 100644
--- a/src/ssl_load.c
+++ b/src/ssl_load.c
@@ -1607,6 +1607,9 @@ static int ProcessBufferCertPublicKey(WOLFSSL_CTX* ctx, WOLFSSL* ssl,
 #ifndef NO_RSA
     word32 idx;
 #endif
+    if (ctx == NULL && ssl == NULL) {
+        return BAD_FUNC_ARG;
+    }
 
     /* Get key size and check unless not verifying. */
     switch (cert->keyOID) {