--- istream.c.dist	Thu Jan  2 16:51:14 2003
+++ istream.c	Thu Jan  2 16:44:43 2003
@@ -443,7 +443,11 @@
 		}
 	    }
 	    method = X509V3_EXT_get(ex);
+#if OPENSSL_VERSION_NUMBER >= 0x00907000L
+       if (method->it) ASN1_item_free(alt, ASN1_ITEM_ptr(method->it));
+	    else
+#endif
 	    method->ext_free(alt);
 	    if (i < n)		/* Found a match */
 		match_ident = TRUE;
 	    else if (seen_dnsname)