From a121c7b460f4f2919d9d291c6da9711878cde7b8 Mon Sep 17 00:00:00 2001
From: Yujie Zhao <yujzhao@amazon.com>
Date: Tue, 17 Sep 2019 12:47:18 +0000
Subject: [PATCH] Avoid to shutdown NSS if it is not initialized

---
 src/suricata.c | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/src/suricata.c b/src/suricata.c
index 5a21e6c29d..12aa97bfd9 100644
--- a/src/suricata.c
+++ b/src/suricata.c
@@ -394,8 +394,10 @@ static void GlobalsDestroy(SCInstance *suri)
     TmModuleRunDeInit();
     ParseSizeDeinit();
 #ifdef HAVE_NSS
-    NSS_Shutdown();
-    PR_Cleanup();
+    if (NSS_IsInitialized()) {
+        NSS_Shutdown();
+        PR_Cleanup();
+    }
 #endif
 
 #ifdef HAVE_AF_PACKET