diff --git a/include/proto/ssl_sock.h b/include/proto/ssl_sock.h
index ec616dc..61cf420 100644
--- a/include/proto/ssl_sock.h
+++ b/include/proto/ssl_sock.h
@@ -72,7 +72,7 @@
 SSL_CTX *ssl_sock_create_cert(const char *servername, unsigned int serial, X509 *cacert, EVP_PKEY *capkey);
 SSL_CTX *ssl_sock_get_generated_cert(unsigned int serial, X509 *cacert);
 void ssl_sock_set_generated_cert(SSL_CTX *ctx, unsigned int serial, X509 *cacert);
-unsigned int ssl_sock_generated_cert_serial(void *data, size_t len);
+unsigned int ssl_sock_generated_cert_serial(const void *data, size_t len);
 
 #endif /* _PROTO_SSL_SOCK_H */
 
diff --git a/src/ssl_sock.c b/src/ssl_sock.c
index aa7bb1b..aa1d2ae 100644
--- a/src/ssl_sock.c
+++ b/src/ssl_sock.c
@@ -1145,7 +1145,7 @@
 
 /* Compute the serial that will be used to create/set/get a certificate. */
 unsigned int
-ssl_sock_generated_cert_serial(void *data, size_t len)
+ssl_sock_generated_cert_serial(const void *data, size_t len)
 {
 	return XXH32(data, len, ssl_ctx_lru_seed);
 }