diff --git a/ssl/s3_lib.c b/ssl/s3_lib.c
index dcdf4eeb..e783c8f0 100644
--- a/ssl/s3_lib.c
+++ b/ssl/s3_lib.c
@@ -640,12 +640,6 @@ int ssl3_new(SSL *s) {
   memset(s3->wrec.seq_num, 0, sizeof(s3->wrec.seq_num));
 
   s->s3 = s3;
-
-  s->tlsext_channel_id_enabled = s->ctx->tlsext_channel_id_enabled;
-  if (s->ctx->tlsext_channel_id_private) {
-    s->tlsext_channel_id_private =
-        EVP_PKEY_dup(s->ctx->tlsext_channel_id_private);
-  }
   s->method->ssl_clear(s);
 
   return 1;
diff --git a/ssl/ssl_lib.c b/ssl/ssl_lib.c
index 5ed35312..76f74084 100644
--- a/ssl/ssl_lib.c
+++ b/ssl/ssl_lib.c
@@ -329,6 +329,11 @@ SSL *SSL_new(SSL_CTX *ctx) {
   s->psk_client_callback = ctx->psk_client_callback;
   s->psk_server_callback = ctx->psk_server_callback;
 
+  s->tlsext_channel_id_enabled = ctx->tlsext_channel_id_enabled;
+  if (ctx->tlsext_channel_id_private) {
+    s->tlsext_channel_id_private = EVP_PKEY_dup(ctx->tlsext_channel_id_private);
+  }
+
   s->signed_cert_timestamps_enabled = s->ctx->signed_cert_timestamps_enabled;
   s->ocsp_stapling_enabled = s->ctx->ocsp_stapling_enabled;