TLS client certificates and memory use

[David Hawes <dhawes@vt.edu>]

I was doing some testing and noticed that when I search for entries
using TLS, significantly more memory is used when using client
certificates than without them.  In fact, memory will eventually be
exhausted if the searches are performed indefinitely.  Without using
them, memory use stays (around) the same value.

I stripped down the config, removed all ACLs except one (to disallow
access), and started with an empty database, and get the same results.

I've noticed this in 2.4.11, 2.4.12, and 2.4.13 with OpenSSL 0.9.8i.  I
do not notice it with an old 2.3.39 instance.

Has anyone noticed anything similar, or can anyone reproduce this?

Dave