diff --git a/src/tls13.c b/src/tls13.c
index 7c311848f..3302662a1 100644
--- a/src/tls13.c
+++ b/src/tls13.c
@@ -1626,7 +1626,7 @@ int DeriveTls13Keys(WOLFSSL* ssl, int secret, int side, int store)
         w64wrapper epochNumber;
         ret = Dtls13DeriveSnKeys(ssl, provision);
         if (ret != 0)
-            return ret;
+            goto end;
 
         switch (secret) {
             case early_data_key: