diff --git a/ircd/net.cc b/ircd/net.cc
index 8310baff1..e4134225a 100644
--- a/ircd/net.cc
+++ b/ircd/net.cc
@@ -1762,9 +1762,11 @@ noexcept try
 	assert(bool(sock));
 
 	#ifdef RB_DEBUG
-	const auto &current_cipher
+	const auto *const current_cipher
 	{
-		openssl::current_cipher(*sock)
+		!ec?
+			openssl::current_cipher(*sock):
+			nullptr
 	};
 
 	thread_local char ecbuf[64];
@@ -3222,9 +3224,11 @@ noexcept try
 		ec = make_error_code(errc::timed_out);
 
 	#ifdef RB_DEBUG
-	const auto &current_cipher
+	const auto *const current_cipher
 	{
-		openssl::current_cipher(*this)
+		!ec?
+			openssl::current_cipher(*this):
+			nullptr
 	};
 
 	thread_local char ecbuf[64];