duplicate x509 in mem for delayed verification

daemon/call.c

@@ -2260,6 +2260,8 @@ static void __call_free(void *p) {
 
 	while (c->streams) {
 		ps = c->streams->data;
+		if (ps->dtls_cert)
+			X509_free(ps->dtls_cert);
 		c->streams = g_slist_delete_link(c->streams, c->streams);
 		g_slice_free1(sizeof(*ps), ps);
 	}

daemon/dtls.c

@@ -343,7 +343,9 @@ static int verify_callback(int ok, X509_STORE_CTX *store) {
 	if (!media)
 		return 0;
 
-	ps->dtls_cert = X509_STORE_CTX_get_current_cert(store);
+	if (ps->dtls_cert)
+		X509_free(ps->dtls_cert);
+	ps->dtls_cert = X509_dup(X509_STORE_CTX_get_current_cert(store));
 
 	if (!media->fingerprint.hash_func)
 		return 1; /* delay verification */