diff --git a/library/ssl_msg.c b/library/ssl_msg.c
index 3956a67..55623cc 100644
--- a/library/ssl_msg.c
+++ b/library/ssl_msg.c
@@ -1164,6 +1164,9 @@
             MD_CHK( mbedtls_md_update( ctx, data + offset, 1 ) );
     }
 
+    /* The context needs to finish() before it starts() again */
+    MD_CHK( mbedtls_md_finish( ctx, aux_out ) );
+
     /* Now compute HASH(okey + inner_hash) */
     MD_CHK( mbedtls_md_starts( ctx ) );
     MD_CHK( mbedtls_md_update( ctx, okey, block_size ) );