--- openldap-2.4.16.orig/libraries/libldap/tls_g.c
+++ openldap-2.4.16/libraries/libldap/tls_g.c
@@ -354,6 +354,9 @@
 		gnutls_x509_crt_t certs[VERIFY_DEPTH];
 		unsigned int max = VERIFY_DEPTH;
 
+		rc = gnutls_x509_privkey_init(&key);
+		if ( rc < 0 ) return -1;
+
 		/* OpenSSL builds the cert chain for us, but GnuTLS
 		 * expects it to be present in the certfile. If it's
 		 * not, we have to build it ourselves. So we have to