From 91bc6d60e9d8fc3f0e6e2663c19fc2137e28ee3a Mon Sep 17 00:00:00 2001
From: Viktor Szakats <commit@vsz.me>
Date: Sat, 9 Aug 2025 02:44:04 +0200
Subject: [PATCH] undo move

---
 lib/vtls/openssl.c | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/lib/vtls/openssl.c b/lib/vtls/openssl.c
index 771dc1e450..c7efbe778e 100644
--- a/lib/vtls/openssl.c
+++ b/lib/vtls/openssl.c
@@ -4535,6 +4535,10 @@ static CURLcode ossl_connect_step2(struct Curl_cfilter *cf,
 
   connssl->io_need = CURL_SSL_IO_NEED_NONE;
 
+  ERR_clear_error();
+
+  err = SSL_connect(octx->ssl);
+
   if(!octx->x509_store_setup) {
     /* After having send off the ClientHello, we prepare the x509
      * store to verify the coming certificate from the server */
@@ -4544,10 +4548,6 @@ static CURLcode ossl_connect_step2(struct Curl_cfilter *cf,
     octx->x509_store_setup = TRUE;
   }
 
-  ERR_clear_error();
-
-  err = SSL_connect(octx->ssl);
-
 #ifndef HAVE_KEYLOG_CALLBACK
   /* If key logging is enabled, wait for the handshake to complete and then
    * proceed with logging secrets (for TLS 1.2 or older).