Ciphermail crashes regularly

Gateway
1

Good morning,

on one of our client's server we are running Ciphermail Version: 3.2.7-5. Built: 2017-04-18-21:39.

The process crashes every 2-3 days with the following messages in james.wrapper.log:

22 Jan 2018 06:48:13 | INFO Replacing Issuer: CN=VPS-CA-1, O=Bundesagentur fuer Arbeit, C=DE; CRL number: 98378; Thumbprint: 3663997E3157C83F295546E6F84EEFDB0200489FFBE553978634A025715319179681806545A5E105D0E09
1F77EC6EDE4FA7005DFBEDCD53C2EE177A1BCD10CBE; SHA1: 452DE5AA5EC1758AFC2F308C7D388FD1CADCBD96 with Issuer: CN=VPS-CA-1, O=Bundesagentur fuer Arbeit, C=DE; CRL number: 98379; Thumbprint: 0A8290102A6ACD8B7E1EFA7B482
F96F7163A9B8D04F9317968B251036F409E16802863837BF8EF7B610E8015FD7F547A570F852907ABE74206AFDE13573EFBD1; SHA1: 03AE7FA2B4E7A503089EE29D35347A9D56DC650C (mitm.common.security.crl.CRLStoreMaintainerImpl) [CRL Updater thread]
22 Jan 2018 06:48:30 | ERROR Error in certificate request handler thread. (mitm.common.security.ca.CAImpl) [Certificate request handler thread]
java.lang.OutOfMemoryError: GC overhead limit exceeded
22 Jan 2018 06:48:31 | ERROR Error reading CRL. Skipping CRL (mitm.common.security.crl.CRLStoreMaintainerImpl) [CRL Updater thread]
mitm.common.security.crlstore.CRLStoreException: mitm.common.hibernate.DatabaseException: mitm.common.security.crlstore.CRLStoreException: java.lang.OutOfMemoryError: GC overhead limit exceeded
at mitm.common.security.crl.TransactedCRLStoreMaintainer.internalAddCRL(TransactedCRLStoreMaintainer.java:124)
at mitm.common.security.crl.CRLStoreMaintainerImpl.addCRLs(CRLStoreMaintainerImpl.java:406)
at mitm.common.security.crl.CRLStoreUpdaterImpl.downloadCRLs(CRLStoreUpdaterImpl.java:337)
at mitm.common.security.crl.CRLStoreUpdaterImpl.update(CRLStoreUpdaterImpl.java:413)
at mitm.common.security.crl.ThreadedCRLStoreUpdaterImpl$Updater.updateCRLStore(ThreadedCRLStoreUpdaterImpl.java:161)
at mitm.common.security.crl.ThreadedCRLStoreUpdaterImpl$Updater.access$200(ThreadedCRLStoreUpdaterImpl.java:98)
at mitm.common.security.crl.ThreadedCRLStoreUpdaterImpl$Updater$1.doAction(ThreadedCRLStoreUpdaterImpl.java:130)
at mitm.common.hibernate.DatabaseActionExecutorImpl$1.doAction(DatabaseActionExecutorImpl.java:164)
at mitm.common.hibernate.DatabaseActionExecutorImpl.executeTransaction(DatabaseActionExecutorImpl.java:81)
at mitm.common.hibernate.DatabaseActionExecutorImpl.executeTransaction(DatabaseActionExecutorImpl.java:158)
at mitm.common.security.crl.ThreadedCRLStoreUpdaterImpl$Updater.run(ThreadedCRLStoreUpdaterImpl.java:118)
at java.lang.Thread.run(Thread.java:748)
Caused by: mitm.common.hibernate.DatabaseException: mitm.common.security.crlstore.CRLStoreException: java.lang.OutOfMemoryError: GC overhead limit exceeded
at mitm.common.security.crl.TransactedCRLStoreMaintainer$1.doAction(TransactedCRLStoreMaintainer.java:110)
at mitm.common.security.crl.TransactedCRLStoreMaintainer$1.doAction(TransactedCRLStoreMaintainer.java:96)
at mitm.common.hibernate.DatabaseActionExecutorImpl.executeTransaction(DatabaseActionExecutorImpl.java:81)
at mitm.common.security.crl.TransactedCRLStoreMaintainer.internalAddCRL(TransactedCRLStoreMaintainer.java:94)
... 11 more
Caused by: mitm.common.security.crlstore.CRLStoreException: java.lang.OutOfMemoryError: GC overhead limit exceeded
at mitm.common.security.crl.CRLStoreMaintainerImpl.internalAddCRL(CRLStoreMaintainerImpl.java:369)
at mitm.common.security.crl.TransactedCRLStoreMaintainer.access$101(TransactedCRLStoreMaintainer.java:53)
at mitm.common.security.crl.TransactedCRLStoreMaintainer$1.doAction(TransactedCRLStoreMaintainer.java:107)
... 14 more
Caused by: java.lang.OutOfMemoryError: GC overhead limit exceeded
22 Jan 2018 06:48:31 | INFO Trying to download CRL from http://crl.globalsign.com/gspersonalsign2sha2g3.crl (mitm.common.security.crl.CRLDownloaderImpl) [CRL Updater thread]

When we start the process, information of the memory is missing:

* DJIGZO_HOME=/usr/local/djigzo
* Starting CipherMail
* Total memory: MB
* JVM max memory: MB

The system is a Ubuntu 16.04 64bit with 8 GB RAM and 4 GB SWAP. There is only Ciphermail running, together with nearly 20 IPSec VPNs.

Shall we fine tune the memory settings of Ciphermail? And if yes, what are recommended settings?

Thanks for any suggestions.

Best regards,

Stefan

2

Hi Stefan,

This appears to be a low memory issue.

The total memory and JVM max memory is not displayed so this seem to
suggest that this is not working on your system.

It looks like CipherMail was installed from the tar files and not with
the deb files. The file /etc/default/djigzo might therefore be missing.

Can you check whether the file /etc/default/djigzo exists?

If not try the attached file and place it in /etc/default/djigzo.

Kind regards,

Martijn Brinkers

djigzo.bat (1.31 KB)

ยทยทยท

On 22-01-18 10:21, Stefan Michael Guenther via Users wrote:

Good morning,

on one of our client's server we are running Ciphermail Version: 3.2.7-5. Built: 2017-04-18-21:39.

The process crashes every 2-3 days with the following messages in james.wrapper.log:

22 Jan 2018 06:48:13 | INFO Replacing Issuer: CN=VPS-CA-1, O=Bundesagentur fuer Arbeit, C=DE; CRL number: 98378; Thumbprint: 3663997E3157C83F295546E6F84EEFDB0200489FFBE553978634A025715319179681806545A5E105D0E09
1F77EC6EDE4FA7005DFBEDCD53C2EE177A1BCD10CBE; SHA1: 452DE5AA5EC1758AFC2F308C7D388FD1CADCBD96 with Issuer: CN=VPS-CA-1, O=Bundesagentur fuer Arbeit, C=DE; CRL number: 98379; Thumbprint: 0A8290102A6ACD8B7E1EFA7B482
F96F7163A9B8D04F9317968B251036F409E16802863837BF8EF7B610E8015FD7F547A570F852907ABE74206AFDE13573EFBD1; SHA1: 03AE7FA2B4E7A503089EE29D35347A9D56DC650C (mitm.common.security.crl.CRLStoreMaintainerImpl) [CRL Updater thread]
22 Jan 2018 06:48:30 | ERROR Error in certificate request handler thread. (mitm.common.security.ca.CAImpl) [Certificate request handler thread]
java.lang.OutOfMemoryError: GC overhead limit exceeded
22 Jan 2018 06:48:31 | ERROR Error reading CRL. Skipping CRL (mitm.common.security.crl.CRLStoreMaintainerImpl) [CRL Updater thread]
mitm.common.security.crlstore.CRLStoreException: mitm.common.hibernate.DatabaseException: mitm.common.security.crlstore.CRLStoreException: java.lang.OutOfMemoryError: GC overhead limit exceeded
at mitm.common.security.crl.TransactedCRLStoreMaintainer.internalAddCRL(TransactedCRLStoreMaintainer.java:124)
at mitm.common.security.crl.CRLStoreMaintainerImpl.addCRLs(CRLStoreMaintainerImpl.java:406)
at mitm.common.security.crl.CRLStoreUpdaterImpl.downloadCRLs(CRLStoreUpdaterImpl.java:337)
at mitm.common.security.crl.CRLStoreUpdaterImpl.update(CRLStoreUpdaterImpl.java:413)
at mitm.common.security.crl.ThreadedCRLStoreUpdaterImpl$Updater.updateCRLStore(ThreadedCRLStoreUpdaterImpl.java:161)
at mitm.common.security.crl.ThreadedCRLStoreUpdaterImpl$Updater.access$200(ThreadedCRLStoreUpdaterImpl.java:98)
at mitm.common.security.crl.ThreadedCRLStoreUpdaterImpl$Updater$1.doAction(ThreadedCRLStoreUpdaterImpl.java:130)
at mitm.common.hibernate.DatabaseActionExecutorImpl$1.doAction(DatabaseActionExecutorImpl.java:164)
at mitm.common.hibernate.DatabaseActionExecutorImpl.executeTransaction(DatabaseActionExecutorImpl.java:81)
at mitm.common.hibernate.DatabaseActionExecutorImpl.executeTransaction(DatabaseActionExecutorImpl.java:158)
at mitm.common.security.crl.ThreadedCRLStoreUpdaterImpl$Updater.run(ThreadedCRLStoreUpdaterImpl.java:118)
at java.lang.Thread.run(Thread.java:748)
Caused by: mitm.common.hibernate.DatabaseException: mitm.common.security.crlstore.CRLStoreException: java.lang.OutOfMemoryError: GC overhead limit exceeded
at mitm.common.security.crl.TransactedCRLStoreMaintainer$1.doAction(TransactedCRLStoreMaintainer.java:110)
at mitm.common.security.crl.TransactedCRLStoreMaintainer$1.doAction(TransactedCRLStoreMaintainer.java:96)
at mitm.common.hibernate.DatabaseActionExecutorImpl.executeTransaction(DatabaseActionExecutorImpl.java:81)
at mitm.common.security.crl.TransactedCRLStoreMaintainer.internalAddCRL(TransactedCRLStoreMaintainer.java:94)
... 11 more
Caused by: mitm.common.security.crlstore.CRLStoreException: java.lang.OutOfMemoryError: GC overhead limit exceeded
at mitm.common.security.crl.CRLStoreMaintainerImpl.internalAddCRL(CRLStoreMaintainerImpl.java:369)
at mitm.common.security.crl.TransactedCRLStoreMaintainer.access$101(TransactedCRLStoreMaintainer.java:53)
at mitm.common.security.crl.TransactedCRLStoreMaintainer$1.doAction(TransactedCRLStoreMaintainer.java:107)
... 14 more
Caused by: java.lang.OutOfMemoryError: GC overhead limit exceeded
22 Jan 2018 06:48:31 | INFO Trying to download CRL from http://crl.globalsign.com/gspersonalsign2sha2g3.crl (mitm.common.security.crl.CRLDownloaderImpl) [CRL Updater thread]

When we start the process, information of the memory is missing:

* DJIGZO_HOME=/usr/local/djigzo
* Starting CipherMail
* Total memory: MB
* JVM max memory: MB

The system is a Ubuntu 16.04 64bit with 8 GB RAM and 4 GB SWAP. There is only Ciphermail running, together with nearly 20 IPSec VPNs.

Shall we fine tune the memory settings of Ciphermail? And if yes, what are recommended settings?

--
CipherMail email encryption

Email encryption with support for S/MIME, OpenPGP, PDF encryption and
secure webmail pull.

Twitter: http://twitter.com/CipherMail