diff --git a/openssl-sys/src/lib.rs b/openssl-sys/src/lib.rs
index 018f8bca060c300c64926b6a32956a53c5ba1001..239f8d9e8308521fc6b5155ae504486326e1556f 100644
--- a/openssl-sys/src/lib.rs
+++ b/openssl-sys/src/lib.rs
@@ -482,6 +482,7 @@ extern "C" {
 
     pub fn RAND_bytes(buf: *mut u8, num: c_int) -> c_int;
 
+    pub fn RSA_free(rsa: *mut RSA);
     pub fn RSA_generate_key(modsz: c_int, e: c_ulong, cb: *const c_void, cbarg: *const c_void) -> *mut RSA;
     pub fn RSA_generate_key_ex(rsa: *mut RSA, bits: c_int, e: *mut BIGNUM, cb: *const c_void) -> c_int;
     pub fn RSA_private_decrypt(flen: c_int, from: *const u8, to: *mut u8, k: *mut RSA,
diff --git a/openssl/src/crypto/pkey.rs b/openssl/src/crypto/pkey.rs
index 6ca0aa120ca0a686c7e3b821a2fa9b0e9e630cdd..741c674937f93477f4bfc068b89c92ba151d197b 100644
--- a/openssl/src/crypto/pkey.rs
+++ b/openssl/src/crypto/pkey.rs
@@ -120,6 +120,7 @@ impl PKey {
             let mut s = repeat(0u8).take(len as usize).collect::<Vec<_>>();
 
             let r = f(rsa, &s.as_mut_ptr());
+            ffi::RSA_free(rsa);
 
             s.truncate(r as usize);
             s