Some few days ago there was I question about whether one could add a
call back
to do special handling when an SSL_CTX was freed. I don't know whether
my answer got through;

Daniel Stenberg wrote:
> On Mon, 12 Feb 2007, Shmulik Regev wrote:
>
>> The CURLOPT_SSL_CTX_FUNCTION option enables the daring ones to
>> control openssl at a fine-grained level during the setup process.
>> What is missing though is the notification when the SSL_CTX object is
>> about to be freed, to enable related (though application specific)
>> resource deallocation. My question is, whether you see this as a
>> relevant issue and will such a change (a pretty straight forward one
>> actually) can find its way into the next curl version. If the answer
>> is yes, I'll gladly contribute it.
>
> Yes, I can see how this makes sense and would fit into the existing
> setup.
>
What about just doing the necessary things just before or after calling
curl_easy_cleanup,
unless I'm wrong this is the only function that a few levels down calls
SSL_CTX_free,
thus it is under full control of the application.