diff --git a/modules/ssl/ssl_engine_io.c b/modules/ssl/ssl_engine_io.c
index 916514c16b..20467937b9 100644
--- a/modules/ssl/ssl_engine_io.c
+++ b/modules/ssl/ssl_engine_io.c
@@ -321,7 +321,7 @@ static int char_buffer_read(char_buffer_t *buffer, char *in, int inl)
         return 0;
     }
 
-    if (buffer->length >= inl) {
+    if (buffer->length > inl) {
         /* we have have enough to fill the caller's buffer */
         memcpy(in, buffer->value, inl);
         buffer->value += inl;