Good morning, on one of our client's server we are running Ciphermail Version: 3.2.7-5. Built: 2017-04-18-21:39.
The process crashes every 2-3 days with the following messages in james.wrapper.log: 22 Jan 2018 06:48:13 | INFO Replacing Issuer: CN=VPS-CA-1, O=Bundesagentur fuer Arbeit, C=DE; CRL number: 98378; Thumbprint: 3663997E3157C83F295546E6F84EEFDB0200489FFBE553978634A025715319179681806545A5E105D0E09 1F77EC6EDE4FA7005DFBEDCD53C2EE177A1BCD10CBE; SHA1: 452DE5AA5EC1758AFC2F308C7D388FD1CADCBD96 with Issuer: CN=VPS-CA-1, O=Bundesagentur fuer Arbeit, C=DE; CRL number: 98379; Thumbprint: 0A8290102A6ACD8B7E1EFA7B482 F96F7163A9B8D04F9317968B251036F409E16802863837BF8EF7B610E8015FD7F547A570F852907ABE74206AFDE13573EFBD1; SHA1: 03AE7FA2B4E7A503089EE29D35347A9D56DC650C (mitm.common.security.crl.CRLStoreMaintainerImpl) [CRL Updater thread] 22 Jan 2018 06:48:30 | ERROR Error in certificate request handler thread. (mitm.common.security.ca.CAImpl) [Certificate request handler thread] java.lang.OutOfMemoryError: GC overhead limit exceeded 22 Jan 2018 06:48:31 | ERROR Error reading CRL. Skipping CRL (mitm.common.security.crl.CRLStoreMaintainerImpl) [CRL Updater thread] mitm.common.security.crlstore.CRLStoreException: mitm.common.hibernate.DatabaseException: mitm.common.security.crlstore.CRLStoreException: java.lang.OutOfMemoryError: GC overhead limit exceeded at mitm.common.security.crl.TransactedCRLStoreMaintainer.internalAddCRL(TransactedCRLStoreMaintainer.java:124) at mitm.common.security.crl.CRLStoreMaintainerImpl.addCRLs(CRLStoreMaintainerImpl.java:406) at mitm.common.security.crl.CRLStoreUpdaterImpl.downloadCRLs(CRLStoreUpdaterImpl.java:337) at mitm.common.security.crl.CRLStoreUpdaterImpl.update(CRLStoreUpdaterImpl.java:413) at mitm.common.security.crl.ThreadedCRLStoreUpdaterImpl$Updater.updateCRLStore(ThreadedCRLStoreUpdaterImpl.java:161) at mitm.common.security.crl.ThreadedCRLStoreUpdaterImpl$Updater.access$200(ThreadedCRLStoreUpdaterImpl.java:98) at mitm.common.security.crl.ThreadedCRLStoreUpdaterImpl$Updater$1.doAction(ThreadedCRLStoreUpdaterImpl.java:130) at mitm.common.hibernate.DatabaseActionExecutorImpl$1.doAction(DatabaseActionExecutorImpl.java:164) at mitm.common.hibernate.DatabaseActionExecutorImpl.executeTransaction(DatabaseActionExecutorImpl.java:81) at mitm.common.hibernate.DatabaseActionExecutorImpl.executeTransaction(DatabaseActionExecutorImpl.java:158) at mitm.common.security.crl.ThreadedCRLStoreUpdaterImpl$Updater.run(ThreadedCRLStoreUpdaterImpl.java:118) at java.lang.Thread.run(Thread.java:748) Caused by: mitm.common.hibernate.DatabaseException: mitm.common.security.crlstore.CRLStoreException: java.lang.OutOfMemoryError: GC overhead limit exceeded at mitm.common.security.crl.TransactedCRLStoreMaintainer$1.doAction(TransactedCRLStoreMaintainer.java:110) at mitm.common.security.crl.TransactedCRLStoreMaintainer$1.doAction(TransactedCRLStoreMaintainer.java:96) at mitm.common.hibernate.DatabaseActionExecutorImpl.executeTransaction(DatabaseActionExecutorImpl.java:81) at mitm.common.security.crl.TransactedCRLStoreMaintainer.internalAddCRL(TransactedCRLStoreMaintainer.java:94) ... 11 more Caused by: mitm.common.security.crlstore.CRLStoreException: java.lang.OutOfMemoryError: GC overhead limit exceeded at mitm.common.security.crl.CRLStoreMaintainerImpl.internalAddCRL(CRLStoreMaintainerImpl.java:369) at mitm.common.security.crl.TransactedCRLStoreMaintainer.access$101(TransactedCRLStoreMaintainer.java:53) at mitm.common.security.crl.TransactedCRLStoreMaintainer$1.doAction(TransactedCRLStoreMaintainer.java:107) ... 14 more Caused by: java.lang.OutOfMemoryError: GC overhead limit exceeded 22 Jan 2018 06:48:31 | INFO Trying to download CRL from http://crl.globalsign.com/gspersonalsign2sha2g3.crl (mitm.common.security.crl.CRLDownloaderImpl) [CRL Updater thread] When we start the process, information of the memory is missing: * DJIGZO_HOME=/usr/local/djigzo * Starting CipherMail * Total memory: MB * JVM max memory: MB The system is a Ubuntu 16.04 64bit with 8 GB RAM and 4 GB SWAP. There is only Ciphermail running, together with nearly 20 IPSec VPNs. Shall we fine tune the memory settings of Ciphermail? And if yes, what are recommended settings? Thanks for any suggestions. Best regards, Stefan
smime.p7s
Description: S/MIME Cryptographic Signature
_______________________________________________ Users mailing list Users@lists.djigzo.com https://lists.djigzo.com/lists/listinfo/users
