@@ -350,7 +350,7 @@ init_ssl (const struct options *options, struct tls_root_ctx *new_ctx)

 	  &my_cert);

       tls_ctx_use_external_private_key(new_ctx, my_cert);

-      X509_free(my_cert);

+      tls_ctx_free_cert_file(my_cert);

     }

 #endif

   else

@@ -197,6 +197,13 @@ void tls_ctx_load_cert_file (struct tls_root_ctx *ctx, const char *cert_file,

     );

 /**

+ * Free the given certificate

+ *

+ * @param x509			certificate to free

+ */

+void tls_ctx_free_cert_file (x509_cert_t *x509);

+

+/**

  * Load private key file into the given TLS context.

  *

  * @param ctx			TLS context to use

@@ -431,6 +431,12 @@ tls_ctx_load_cert_file (struct tls_root_ctx *ctx, const char *cert_file,

     }

 }

+void

+tls_ctx_free_cert_file (X509 *x509)

+{

+  X509_free(x509);

+}

+

 #if ENABLE_INLINE_FILES

 static int

 use_inline_PrivateKey_file (SSL_CTX *ctx, const char *key_string)

@@ -262,6 +262,12 @@ tls_ctx_load_cert_file (struct tls_root_ctx *ctx, const char *cert_file,

     }

 }

+void

+tls_ctx_free_cert_file (x509_cert_t *x509)

+{

+  x509_free(x509);

+}

+

 int

 tls_ctx_load_priv_file (struct tls_root_ctx *ctx, const char *priv_key_file

 #if ENABLE_INLINE_FILES