diff --git a/kern/devssl.c b/kern/devssl.c
index ecbf66d..40e5375 100644
--- a/kern/devssl.c
+++ b/kern/devssl.c
@@ -623,7 +623,8 @@ sslbread(Chan *c, long n, ulong o)
 			if(b == nil)
 				error("ssl message too short (digesting)");
 			checkdigestb(s, b);
-			b->rp += s->diglen;
+			pullblock(&b, s->diglen);
+			len -= s->diglen;
 			break;
 		case Sdigenc:
 			b = decryptb(s, b);
@@ -631,7 +632,7 @@ sslbread(Chan *c, long n, ulong o)
 			if(b == nil)
 				error("ssl message too short (dig+enc)");
 			checkdigestb(s, b);
-			b->rp += s->diglen;
+			pullblock(&b, s->diglen);
 			len -= s->diglen;
 			break;
 		}