diff --git a/src/file_analysis/analyzer/x509/functions.bif b/src/file_analysis/analyzer/x509/functions.bif
index 0192a9b3d9..6cf28eae05 100644
--- a/src/file_analysis/analyzer/x509/functions.bif
+++ b/src/file_analysis/analyzer/x509/functions.bif
@@ -211,7 +211,7 @@ function x509_ocsp_verify%(certs: x509_opaque_vector, ocsp_reply: string, root_c
 
 	// from here, always goto cleanup. Initialize all other required variables...
 	time_t vtime = (time_t) verify_time;
-  OCSP_BASICRESP *basic = 0;
+	OCSP_BASICRESP *basic = 0;
 	OCSP_SINGLERESP *single = 0;
 	X509_STORE_CTX *csc = 0;
 	OCSP_CERTID *certid = 0;
diff --git a/src/main.cc b/src/main.cc
index 10b66083a8..68f1d46547 100644
--- a/src/main.cc
+++ b/src/main.cc
@@ -1174,6 +1174,10 @@ int main(int argc, char** argv)
 
 		sqlite3_shutdown();
 
+		ERR_free_strings();
+		EVP_cleanup();
+		CRYPTO_cleanup_all_ex_data();
+
 		// Close files after net_delete(), because net_delete()
 		// might write to connection content files.
 		BroFile::CloseCachedFiles();