diff --git a/src/tls/openssl/tls.c b/src/tls/openssl/tls.c
index b182b74ef..3b0de4568 100644
--- a/src/tls/openssl/tls.c
+++ b/src/tls/openssl/tls.c
@@ -171,7 +171,7 @@ static int keytype2int(enum tls_keytype type)
  *
  * @return passes parameter ok unchanged
  */
-int tls_verify_handler(int ok, X509_STORE_CTX *ctx)
+static int tls_verify_handler(int ok, X509_STORE_CTX *ctx)
 {
 	int err, depth;
 
diff --git a/src/tls/openssl/tls.h b/src/tls/openssl/tls.h
index ac780f0ae..b54ce9bde 100644
--- a/src/tls/openssl/tls.h
+++ b/src/tls/openssl/tls.h
@@ -33,5 +33,4 @@ const char *tls_cert_host(struct tls_cert *hc);
 const struct list *tls_certs(const struct tls *tls);
 
 struct tls_cert *tls_cert_for_sni(const struct tls *tls, const char *sni);
-int tls_verify_handler(int ok, X509_STORE_CTX *ctx);
 void tls_enable_sni(struct tls *tls);