Plug a memory leak. The main_cert needs to be X509_free()ed since

SSL_get_peer_certificate() increases the ref count whereas extra_certs
do not because SSL_get_peer_cert_chain() won't increase ref counts.
OK beck@

1 files changed, 2 insertions, 0 deletions

diff --git a/src/lib/libtls/tls_ocsp.c b/src/lib/libtls/tls_ocsp.c
index a7aca37a7d..13196bc1fc 100644
--- a/src/lib/libtls/tls_ocsp.c
+++ b/src/lib/libtls/tls_ocsp.c
@@ -46,6 +46,8 @@ tls_ocsp_free(struct tls_ocsp *ocsp)
         if (ocsp == NULL)
                 return;
 
+        X509_free(ocsp->main_cert);
+        ocsp->main_cert = NULL;
         free(ocsp->ocsp_result);
         ocsp->ocsp_result = NULL;
         free(ocsp->ocsp_url);