1 files changed, 8 insertions, 3 deletions
diff --git a/src/lib/crypt.c b/src/lib/crypt.c
index 73cb0b51..9728ac8c 100644
--- a/src/lib/crypt.c
+++ b/src/lib/crypt.c
@@ -265,12 +265,17 @@ int load_sec_config_file(struct sec_config * cfg,
 
         fp = fopen(path, "r");
         if (fp == NULL) {
-                /* File doesn't exist - disable encryption */
-                CLEAR_KEX_ALGO(cfg);
-                return 0;
+                /* Absent config disables encryption; other errors fail */
+                if (errno == ENOENT) {
+                        CLEAR_KEX_ALGO(cfg);
+                        return 0;
+                }
+                return -errno;
         }
 
+        pthread_cleanup_push(__cleanup_fclose, fp);
         ret = parse_sec_config(cfg, fp);
+        pthread_cleanup_pop(0);
 
         fclose(fp);