diff --git a/npa/src/card-npa.c b/npa/src/card-npa.c
index 77aaa56..e1c8f8e 100644
--- a/npa/src/card-npa.c
+++ b/npa/src/card-npa.c
@@ -281,6 +281,7 @@ static int npa_unlock_esign(sc_card_t *card)
             && (!st_key || !st_key_len)) {
         sc_log(card->ctx, "QES requires a comfort reader (CAT-K) or a ST certificate.\n");
         r = SC_ERROR_NOT_SUPPORTED;
+        goto err;
     }
 
     /* FIXME set flags with opensc.conf */