In the function globus_gsi_proxy_handle_set_req, the second if block checks to
see if the handle already contains a request.  In this case, you probably want
to free the old request rather than the new one.

That is,

X509_REQ_free(req);

should be:

X509_REQ_free(handle->req);

This would match the behavior in globus_gsi_proxy_handle_set_private_key

Full disclosure: I just noticed this reading the code; I haven't ever tried to
call this function twice or observed any code that does so and has problems.

Thanks,

-Ian