Hey @denzs,
Thanks for testing this out.
As we discussed in the mailing list and also as noted in the PR, indeed this patch is not adequate to fix the actual problem. I was trying to lower the memory usage and hoped that the increase would not really be noticable any more (clearly not the case from your report).
The problem seems to be in the `SSL_CTX_load_verify_locations` and the usage of it in the `load_crl()`. I will keep digging and see if there is something to be done to actually free the memory.
Just for refernece what OpenSSL are you testing this with?