diff --git a/servers/slapd/back-ldap/config.c b/servers/slapd/back-ldap/config.c
index 151dd87976..1f5eced370 100644
--- a/servers/slapd/back-ldap/config.c
+++ b/servers/slapd/back-ldap/config.c
@@ -989,6 +989,10 @@ slap_idassert_parse( ConfigArgs *c, slap_idassert_t *si )
 	}
 
 	bindconf_tls_defaults( &si->si_bc );
+	if ( si->si_bc.sb_tls_ctx ) {
+		ldap_pvt_tls_ctx_free( si->si_bc.sb_tls_ctx );
+		si->si_bc.sb_tls_ctx = NULL;
+	}
 
 	return 0;
 }
@@ -1808,6 +1812,10 @@ done_url:;
 			}
 			bindconf_tls_defaults( &li->li_tls );
 		}
+		if ( li->li_tls.sb_tls_ctx ) {
+			ldap_pvt_tls_ctx_free( li->li_tls.sb_tls_ctx );
+			li->li_tls.sb_tls_ctx = NULL;
+		}
 		break;
 
 	case LDAP_BACK_CFG_ACL_AUTHCDN:
@@ -1867,6 +1875,10 @@ done_url:;
 			}
 		}
 		bindconf_tls_defaults( &li->li_acl );
+		if ( li->li_acl.sb_tls_ctx ) {
+			ldap_pvt_tls_ctx_free( li->li_acl.sb_tls_ctx );
+			li->li_acl.sb_tls_ctx = NULL;
+		}
 		break;
 
 	case LDAP_BACK_CFG_IDASSERT_MODE: