From f496fbc25e2df4f22822b18b688d3de658f05556 Mon Sep 17 00:00:00 2001
From: Thomas Mannfred Carlsson <mannfred@gmail.com>
Date: Mon, 9 Feb 2026 00:39:54 +0200
Subject: [PATCH] Clean up client socket on SSL connection fail

---
 src/listener.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/listener.c b/src/listener.c
index bcf81704..4909edad 100644
--- a/src/listener.c
+++ b/src/listener.c
@@ -427,12 +427,14 @@ add_connection(struct Listener *listener, rb_fde_t * F, struct sockaddr *sai, st
 		        int saved_errno = errno;
 			log_listener("creating SSL/TLS socket pairs %s:%s",
 				     get_listener_name(listener), strerror(saved_errno));
+			rb_close(F);
 			free_client(new_client);
 			return;
 		}
 		new_client->localClient->ssl_ctl = start_ssld_accept(F, xF[1], new_client->localClient->connid);	/* this will close F for us */
 		if(new_client->localClient->ssl_ctl == NULL)
 		{
+			rb_close(F);
 			rb_close(xF[0]);
 			rb_close(xF[1]);
 			free_client(new_client);