diff --git a/plugin/openssl_plugin/certificate/src/x509_crl_openssl.c b/plugin/openssl_plugin/certificate/src/x509_crl_openssl.c
index 9aa9ecd7fae0f3c27b954204b4caf1a4833ad921..9792a6f8775442f31be93a5b93330851069af015 100644
--- a/plugin/openssl_plugin/certificate/src/x509_crl_openssl.c
+++ b/plugin/openssl_plugin/certificate/src/x509_crl_openssl.c
@@ -793,6 +793,7 @@ static X509_CRL *ParseX509CRL(const HcfEncodingBlob *inStream)
             LOGE("Not support format!");
             break;
     }
+    BIO_free_all(bio);
     if (crlOut == NULL) {
         LOGE("Parse X509 CRL fail!");
         HcfPrintOpensslError();