diff --git a/library/ssl_tls.c b/library/ssl_tls.c
index 364cfc7..6191d63 100644
--- a/library/ssl_tls.c
+++ b/library/ssl_tls.c
@@ -1092,8 +1092,8 @@
                                  &key_type,
                                  &key_bits ) ) != PSA_SUCCESS )
     {
-        MBEDTLS_SSL_DEBUG_RET( 1, "mbedtls_cipher_to_psa", psa_status_to_mbedtls( status ) );
         ret = psa_status_to_mbedtls( status );
+        MBEDTLS_SSL_DEBUG_RET( 1, "mbedtls_cipher_to_psa", ret );
         goto end;
     }
 
@@ -1107,8 +1107,8 @@
                              PSA_BITS_TO_BYTES( key_bits ),
                              &transform->psa_key_enc ) ) != PSA_SUCCESS )
     {
-        MBEDTLS_SSL_DEBUG_RET( 1, "psa_import_key", psa_status_to_mbedtls( status ) );
         ret = psa_status_to_mbedtls( status );
+        MBEDTLS_SSL_DEBUG_RET( 1, "psa_import_key", ret );
         goto end;
     }
 
@@ -1119,8 +1119,8 @@
                              PSA_BITS_TO_BYTES( key_bits ),
                              &transform->psa_key_dec ) ) != PSA_SUCCESS )
     {
-        MBEDTLS_SSL_DEBUG_RET( 1, "psa_import_key", psa_status_to_mbedtls( status ) );
         ret = psa_status_to_mbedtls( status );
+        MBEDTLS_SSL_DEBUG_RET( 1, "psa_import_key", ret );
         goto end;
     }
 #endif /* MBEDTLS_USE_PSA_CRYPTO */