memory allocation error - tcp close wait - running out of filedescriptors

[bjornfro]

Hi,

On CentOS 7 with libpki 0.89 and openca-ocspd version: 3.1.2.

For every CRL refresh I get these. I suspect it's related to https sources of CRL.

ocspd[13743]: [ssl.c:112] Memory Allocation Error

This in turn probably gives a lot of these which eventually means that ocspd runs out of file descriptors:

ocspd 13743 nobody 832u IPv4 90332499 0t0 TCP x.x.x.x:60574->y.y.y.y:8140 (CLOSE_WAIT)
ocspd 13743 nobody 834u IPv4 90341221 0t0 TCP x.x.x.x:60598->y.y.y.y:8140 (CLOSE_WAIT)
ocspd 13743 nobody 836u IPv4 90349575 0t0 TCP x.x.x.x:60622->y.y.y.y:8140 (CLOSE_WAIT)
ocspd 13743 nobody 838u IPv4 90357809 0t0 TCP x.x.x.x:60646->y.y.y.y:8140 (CLOSE_WAIT)
ocspd 13743 nobody 840u IPv4 90366127 0t0 TCP x.x.x.x:60670->y.y.y.y:8140 (CLOSE_WAIT)
ocspd 13743 nobody 842u IPv4 90374342 0t0 TCP x.x.x.x:60694->y.y.y.y:8140 (CLOSE_WAIT)
ocspd 13743 nobody 844u IPv4 90383929 0t0 TCP x.x.x.x:60718->y.y.y.y:8140 (CLOSE_WAIT)
ocspd 13743 nobody 846u IPv4 90392219 0t0 TCP x.x.x.x:60742->y.y.y.y:8140 (CLOSE_WAIT)
ocspd 13743 nobody 848u IPv4 90400606 0t0 TCP x.x.x.x:60766->y.y.y.y:8140 (CLOSE_WAIT)
ocspd 13743 nobody 850u IPv4 90408839 0t0 TCP x.x.x.x:60790->y.y.y.y:8140 (CLOSE_WAIT)
ocspd 13743 nobody 852u IPv4 90417266 0t0 TCP x.x.x.x:60814->y.y.y.y:8140 (CLOSE_WAIT)