> On Jan 2, 2018, at 8:10 PM, Dave Coombs <dcoombs@xxxxxxxxxxx> wrote: > > Looking at the code in x509_lu.c, X509_STORE_add_cert() takes ownership of your X509 *cc_cert -- you don't need to (and probably shouldn't) free it. The observation is correct, but the conclusion is wrong. The object is reference counted, and X509_free() is needed to avoid a leak (when the store is freed along with the context). -- Viktor. -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users