diff --git a/lib/resty/ldap/client.lua b/lib/resty/ldap/client.lua
index 442dbfc..a5ebc7e 100644
--- a/lib/resty/ldap/client.lua
+++ b/lib/resty/ldap/client.lua
@@ -133,7 +133,7 @@ local function _init_socket(self)
     end
 
     if socket_config.start_tls or socket_config.ldaps then
-        _, err = sock:sslhandshake(true, host, socket_config.ssl_verify)
+        local _, err = sock:sslhandshake(true, host, socket_config.ssl_verify)
         if err ~= nil then
             return fmt("do TLS handshake on %s:%s failed: %s",
                         host, tostring(port), err)