diff --git a/ssl/ssl_lib.c b/ssl/ssl_lib.c
index 1c4b10c6..d113ab33 100644
--- a/ssl/ssl_lib.c
+++ b/ssl/ssl_lib.c
@@ -2975,7 +2975,7 @@ uint16_t ssl3_get_mutual_version(SSL *s, uint16_t client_version) {
     if (client_version <= DTLS1_2_VERSION && !(s->options & SSL_OP_NO_DTLSv1_2)) {
       version = DTLS1_2_VERSION;
     } else if (client_version <= DTLS1_VERSION &&
-             !(s->options & SSL_OP_NO_DTLSv1)) {
+               !(s->options & SSL_OP_NO_DTLSv1)) {
       version = DTLS1_VERSION;
     }
 
diff --git a/ssl/ssl_sess.c b/ssl/ssl_sess.c
index aadc84cc..72e161be 100644
--- a/ssl/ssl_sess.c
+++ b/ssl/ssl_sess.c
@@ -149,7 +149,7 @@
 static const char g_pending_session_magic = 0;
 
 static void SSL_SESSION_list_remove(SSL_CTX *ctx, SSL_SESSION *s);
-static void SSL_SESSION_list_add(SSL_CTX *ctx,SSL_SESSION *s);
+static void SSL_SESSION_list_add(SSL_CTX *ctx, SSL_SESSION *s);
 static int remove_session_lock(SSL_CTX *ctx, SSL_SESSION *c, int lck);
 
 SSL_SESSION *SSL_magic_pending_session_ptr(void) {
diff --git a/ssl/t1_lib.c b/ssl/t1_lib.c
index dae9a07f..1cf76205 100644
--- a/ssl/t1_lib.c
+++ b/ssl/t1_lib.c
@@ -1990,7 +1990,7 @@ static int ssl_check_serverhello_tlsext(SSL *s) {
     ret = s->ctx->tlsext_servername_callback(s, &al,
                                              s->ctx->tlsext_servername_arg);
   } else if (s->initial_ctx != NULL &&
-           s->initial_ctx->tlsext_servername_callback != 0) {
+             s->initial_ctx->tlsext_servername_callback != 0) {
     ret = s->initial_ctx->tlsext_servername_callback(
         s, &al, s->initial_ctx->tlsext_servername_arg);
   }
diff --git a/ssl/t1_reneg.c b/ssl/t1_reneg.c
index 2d9fbc09..e318771c 100644
--- a/ssl/t1_reneg.c
+++ b/ssl/t1_reneg.c
@@ -170,8 +170,7 @@ int ssl_add_serverhello_renegotiate_ext(SSL *s, unsigned char *p, int *len,
                                         int maxlen) {
   if (p) {
     if (s->s3->previous_client_finished_len +
-            s->s3->previous_server_finished_len + 1 >
-        maxlen) {
+            s->s3->previous_server_finished_len + 1 > maxlen) {
       OPENSSL_PUT_ERROR(SSL, ssl_add_serverhello_renegotiate_ext,
                         SSL_R_RENEGOTIATE_EXT_TOO_LONG);
       return 0;