Thank you indeed for your reply, trondd. Yes, I added certificate(s) to cert.pem, probably more than one time so far. But the size looks not much bigger than normal one that I see from another host. size of the cert.pem modified(?): 357*** size of cert.pem I see from another host where I didn't add anything to the cert.pem: 349***
Do you think 357*** is too big? How did you solve the issue? What can I do if something went wrong when I added certificates or when upgrading openbsd and adding the certificates again? If the router/gateway before the host has been changed so the cert.pem of the gateway is not the same of the previous one, can it be also a matter? On 28/10/2018 04:54, trondd wrote: > On Sat, October 27, 2018 6:19 am, ì*°ë*½ ì*°ë*½ wrote: >> Dear misc, >> >> I am getting an error saying "ssl verify memory setup failure" whenever >> I try to renew existing certificates on a host -- Openbsd 6.3, httpd, >> acme-client. >> Recently there were changes in a few configurations, including network, >> name servers, etc. >> >> The below is all I get when I try command acme-clilent -vv example.com: >> >> ..domain key >> ..account key >> ..cert ...days left >> ..directory >> ..DNS: (some ip) >> (some ip):tls_connect_socket: acme-v01.api.letsencrypt.org, ssl verify >> memory setup failure >> ..bad comm >> bad exit... >> >> Could someone let me know what could cause the ssl verify memory setup >> failure, or if the memory setup failure could be some kind of common >> error, such as something occurred by memory configuration, such as in >> login.conf? >> >> For your information, those worked before. Recently thinking about >> hardware issues, especially for RAM. >> Because I can't share detailed configurations, names, etc., I am >> wondering if someone could kindly give some advice on the above >> information. >> >> Any help and your time would be greatly appreciated indeed. >> > > Did you modify certs.pem? I've run into this when accidentally adding > certs multiple times growing the file too big or writing a DOS formatted > cert to it. >