Daniel Black filed bug #1704675 (http://curl.haxx.se/bug/view.cgi?id=1704675)

identifying a double-free problem in the SSL-dealing layer, telling GnuTLS to
free NULL credentials on closedown after a failure and a bad #ifdef for NSS
when closing down SSL.