In regard to https://bz.apache.org/bugzilla/show_bug.cgi?id=63687 there are now 2 patches, varying in style but fixing the very same missing free.
My attempt uses gotos to have a single point of exit where to free things, while Giovanni Bechis provided a changed version that frees on all possible early returns. Otherwise they achieve the same. I would like to ask Ruediger, who is more "into" mod_ssl, to decide which to apply and what fits the module best. I am fine with both versions. Obviously, I nowadays prefer the goto/single exit style myself, but the rest of the module is different. That might interfere with readability for people not accustomed to the goto variant. Thanks for the help (and sorry to have screwed this up in the fist place), Stefan