diff --git a/builtin/logical/ssh/path_sign.go b/builtin/logical/ssh/path_sign.go
index <HASH>..<HASH> 100644
--- a/builtin/logical/ssh/path_sign.go
+++ b/builtin/logical/ssh/path_sign.go
@@ -388,6 +388,7 @@ func (b *creationBundle) sign() (retCert *ssh.Certificate, retErr error) {
 		if r := recover(); r != nil {
 			err, ok := r.(error)
 			if ok {
+				retCert = nil
 				retErr = err
 			}
 		}
If recovering from panic ensure the cert returned is nil