diff --git a/internal/atls/atls.go b/internal/atls/atls.go
index 6b2e066ae7..6ad101cba2 100644
--- a/internal/atls/atls.go
+++ b/internal/atls/atls.go
@@ -102,7 +102,7 @@ func getATLSConfigForClientFunc(issuer Issuer, validators []Validator) (func(*tl
 	}
 
 	// this function will be called once for every client
-	return func(chi *tls.ClientHelloInfo) (*tls.Config, error) {
+	return func(_ *tls.ClientHelloInfo) (*tls.Config, error) {
 		// generate nonce for this connection
 		serverNonce, err := crypto.GenerateRandomBytes(crypto.RNGLengthDefault)
 		if err != nil {