diff --git a/lib/dns/opensslrsa_link.c b/lib/dns/opensslrsa_link.c
index b4c4a2afcd..a6747d4dff 100644
--- a/lib/dns/opensslrsa_link.c
+++ b/lib/dns/opensslrsa_link.c
@@ -1394,6 +1394,7 @@ opensslrsa_fromlabel(dst_key_t *key, const char *engine, const char *label,
 		if (tmpengine == NULL)
 			DST_RET(ISC_R_NOMEMORY);
 		colon = strchr(tmpengine, ':');
+		INSIST(colon != NULL);
 		*colon = '\0';
 	}
 	e = dst__openssl_getengine(engine);