need to free the stacks returned by calls to SSL_load_client_CA_file()

in ssl_init_FindCAList().  values are pushed into another stack which
gets freed when SSL context is destroyed.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@93625 13f79535-47bb-0310-9956-ffa450edef68

diff --git a/modules/ssl/ssl_engine_init.c b/modules/ssl/ssl_engine_init.c
index 8cea93d3ef040264f38c06cac83701397ea923c5..56c57dbab0f7fc02323f2f9705570e85c7a6a0d4 100644 (file)
--- a/modules/ssl/ssl_engine_init.c
+++ b/modules/ssl/ssl_engine_init.c
@@ -882,6 +882,7 @@ STACK_OF(X509_NAME) *ssl_init_FindCAList(server_rec *s, apr_pool_t *pp, const ch
             if (sk_X509_NAME_find(skCAList, sk_X509_NAME_value(sk, n)) < 0)
                 sk_X509_NAME_push(skCAList, sk_X509_NAME_value(sk, n));
         }
+        sk_X509_NAME_free(sk);
     }
 
     /*
@@ -899,6 +900,7 @@ STACK_OF(X509_NAME) *ssl_init_FindCAList(server_rec *s, apr_pool_t *pp, const ch
                 if (sk_X509_NAME_find(skCAList, sk_X509_NAME_value(sk, n)) < 0)
                     sk_X509_NAME_push(skCAList, sk_X509_NAME_value(sk, n));
             }
+            sk_X509_NAME_free(sk);
         }
         apr_dir_close(dir);
     }