diff --git a/src/ssl.c b/src/ssl.c
index c0f5c1391..b1bdb8f28 100644
--- a/src/ssl.c
+++ b/src/ssl.c
@@ -23568,11 +23568,13 @@ int wolfSSL_RSA_sign_ex(int type, const unsigned char* m,
         }
         else {
             show("Encoded Message", encodedSig, signSz);
-            if(flag != 0){
+            if (flag != 0) {
                 ret = wc_RsaSSL_Sign(encodedSig, signSz, sigRet, outLen,
                                 (RsaKey*)rsa->internal, rng);
-                if (ret <= 0)
+                if (ret <= 0) {
                     WOLFSSL_MSG("Bad Rsa Sign");
+                    ret = 0;
+                }
                 else {
                     *sigLen = (unsigned int)ret;
                     ret = SSL_SUCCESS;