diff --git a/sshpubk.c b/sshpubk.c
index fd40db77..fddcf95e 100644
--- a/sshpubk.c
+++ b/sshpubk.c
@@ -177,6 +177,7 @@ int rsakey_encrypted(char *filename, char **comment) {
         !strcmp(buf, rsa_signature)) {
         return loadrsakey_main(fp, NULL, NULL, comment, NULL);
     }
+    fclose(fp);
     return 0;                          /* wasn't the right kind of file */
 }