Add ldap_pvt_tls_destroy

diff --git a/include/ldap_pvt.h b/include/ldap_pvt.h
index d926912f9ed59a648ed1f8099f79a224fb2bc6a7..6116a0c9b765374bc4c8728b6df4c1100295d922 100644 (file)
--- a/include/ldap_pvt.h
+++ b/include/ldap_pvt.h
@@ -169,6 +169,7 @@ ldap_pvt_str2lower LDAP_P(( char *str ));
 
 /* tls.c */
 LDAP_F (int) ldap_pvt_tls_init LDAP_P(( void ));
+LDAP_F (void) ldap_pvt_tls_destroy LDAP_P(( void ));
 LDAP_F (int) ldap_pvt_tls_connect LDAP_P(( struct ldap *ld,
        Sockbuf *sb, void *ctx_arg ));
 LDAP_F (int) ldap_pvt_tls_accept LDAP_P(( Sockbuf *sb, void *ctx_arg ));

diff --git a/libraries/libldap/tls.c b/libraries/libldap/tls.c
index 8b839d672a20f3d5c79ce688ea3eb73e6f015dfe..23c5042a3bcf71598e52ed24edaba7c02494d560 100644 (file)
--- a/libraries/libldap/tls.c
+++ b/libraries/libldap/tls.c
@@ -97,6 +97,17 @@ static void tls_init_threads( void )
 }
 #endif /* LDAP_R_COMPILE */
 
+/*
+ * Tear down the TLS subsystem. Should only be called once.
+ */
+void
+ldap_pvt_tls_destroy( void )
+{
+       SSL_CTX_free(tls_def_ctx);
+       EVP_cleanup();
+       ERR_free_strings();
+}
+
 /*
  * Initialize TLS subsystem. Should be called only once.
  */