diff --git a/docs/changes.xml b/docs/changes.xml
index b8c76089..d9d25e5c 100644
--- a/docs/changes.xml
+++ b/docs/changes.xml
@@ -9,6 +9,20 @@
          date="" time=""
          packager="Andrei Belov <defan@nginx.com>">
 
+<change type="bugfix">
+<para>
+the router process could crash on premature TLS connection close; the bug had
+appeared in 1.17.0.
+</para>
+</change>
+
+<change type="bugfix">
+<para>
+a connection leak occurring on premature TLS connection close; the bug had
+appeared in 1.6.
+</para>
+</change>
+
 <change type="bugfix">
 <para>
 a descriptor leak occurring in the router process when removing or
diff --git a/src/nxt_openssl.c b/src/nxt_openssl.c
index 832d1f0d..3c0212f7 100644
--- a/src/nxt_openssl.c
+++ b/src/nxt_openssl.c
@@ -720,10 +720,6 @@ nxt_openssl_conn_io_shutdown(nxt_task_t *task, void *obj, void *data)
 
     nxt_debug(task, "openssl conn shutdown fd:%d", c->socket.fd);
 
-    if (c->socket.error != 0) {
-        return;
-    }
-
     c->read_state = NULL;
     tls = c->u.tls;