diff --git a/src/tlshd/client.c b/src/tlshd/client.c
index 0e648ed..249206e 100644
--- a/src/tlshd/client.c
+++ b/src/tlshd/client.c
@@ -486,7 +486,7 @@ static int tlshd_quic_client_set_x509_session(struct tlshd_quic_conn *conn)
 	ret = gnutls_certificate_allocate_credentials(&cred);
 	if (ret)
 		goto err;
-	ret = tlshd_client_get_truststore(xcred);
+	ret = tlshd_client_get_truststore(cred);
 	if (ret != GNUTLS_E_SUCCESS)
 		goto err_cred;
 
@@ -541,7 +541,7 @@ static int tlshd_quic_client_set_anon_session(struct tlshd_quic_conn *conn)
 
 static int tlshd_quic_client_set_psk_session(struct tlshd_quic_conn *conn)
 {
-	key_serial_t peerid = conn->parms->peerids[0];
+	key_serial_t peerid = g_array_index(conn->parms->peerids, key_serial_t, 0);
 	gnutls_psk_client_credentials_t cred;
 	gnutls_session_t session;
 	char *identity = NULL;
diff --git a/src/tlshd/server.c b/src/tlshd/server.c
index db5db31..2498f75 100644
--- a/src/tlshd/server.c
+++ b/src/tlshd/server.c
@@ -478,7 +478,6 @@ static int tlshd_quic_server_set_x509_session(struct tlshd_quic_conn *conn)
 	gnutls_datum_t ticket_key;
 	gnutls_session_t session;
 	int ret = -EINVAL;
-	char *cafile;
 
 	if (!tlshd_x509_server_get_certs(parms) || !tlshd_x509_server_get_privkey(parms)) {
 		tlshd_log_error("cert/privkey get error %d", -ret);