- Andrei Benea filed bug report #2956698 and pointed out that the

  CURLOPT_CERTINFO feature leaked memory due to a missing OpenSSL function
  call. He provided the patch to fix it too.

  http://curl.haxx.se/bug/view.cgi?id=2956698

1 files changed, 1 insertions, 0 deletions

diff --git a/lib/ssluse.c b/lib/ssluse.c
index a1b760e08..ec5c33b28 100644
--- a/lib/ssluse.c
+++ b/lib/ssluse.c
@@ -2125,6 +2125,7 @@ static CURLcode get_cert_chain(struct connectdata *conn,
         break;
 #endif
       }
+      EVP_PKEY_free(pubkey);
     }
 
     X509V3_ext(data, i, cinf->extensions);