diff --git a/lib/isc/tls.c b/lib/isc/tls.c
index 281c09a92e..7781b3e9bc 100644
--- a/lib/isc/tls.c
+++ b/lib/isc/tls.c
@@ -1657,6 +1657,8 @@ isc_tlsctx_client_session_cache_keep(isc_tlsctx_client_session_cache_t *cache,
 		return;
 	}
 
+	SSL_set_session(tls, NULL);
+
 	isc_mutex_lock(&cache->lock);
 
 	name_len = strlen(remote_peer_name);