on patch submitted by Mark Ruijter <openldap@siennax.com>. This addresses (hopefully) ITS 2702, 2703, 2719, 2771. Additional work: fix extraneous frees in libldap/getdn.c x509 rewrite routine indexing