diff --git a/pkg/login/ldap.go b/pkg/login/ldap.go
index cee7096dc45..97a34f129b1 100644
--- a/pkg/login/ldap.go
+++ b/pkg/login/ldap.go
@@ -30,7 +30,7 @@ func (a *ldapAuther) Dial() error {
 	var err error
 	var certPool *x509.CertPool
 	if a.server.RootCACert != "" {
-		certPool := x509.NewCertPool()
+		certPool = x509.NewCertPool()
 		for _, caCertFile := range strings.Split(a.server.RootCACert, " ") {
 			if pem, err := ioutil.ReadFile(caCertFile); err != nil {
 				return err