I was doing some testing and noticed that when I search for entries using TLS, significantly more memory is used when using client certificates than without them. In fact, memory will eventually be exhausted if the searches are performed indefinitely. Without using them, memory use stays (around) the same value.

I stripped down the config, removed all ACLs except one (to disallow access), and started with an empty database, and get the same results.

I've noticed this in 2.4.11, 2.4.12, and 2.4.13 with OpenSSL 0.9.8i. I do not notice it with an old 2.3.39 instance.

Has anyone noticed anything similar, or can anyone reproduce this?

Dave