From be383217b601ceaa5a4fca71cfa3d882f21e6809 Mon Sep 17 00:00:00 2001
From: Jeff Mitchell <jeffrey.mitchell@gmail.com>
Date: Fri, 16 Jun 2017 18:18:15 -0400
Subject: [PATCH] If recovering from panic ensure the cert returned is nil

---
 builtin/logical/ssh/path_sign.go | 1 +
 1 file changed, 1 insertion(+)

diff --git a/builtin/logical/ssh/path_sign.go b/builtin/logical/ssh/path_sign.go
index 0843f3cfa..f94197a4c 100644
--- a/builtin/logical/ssh/path_sign.go
+++ b/builtin/logical/ssh/path_sign.go
@@ -388,6 +388,7 @@ func (b *creationBundle) sign() (retCert *ssh.Certificate, retErr error) {
 		if r := recover(); r != nil {
 			err, ok := r.(error)
 			if ok {
+				retCert = nil
 				retErr = err
 			}
 		}