OK, I upped it to 1024G and it still crashed. I tried loading with a 70M file (the root CA, and the CA directly responsible for my cert). That seemed to load, but when I tried going to a probe application that I've got installed - to get memory data, etc. It prompts me for my cert, but then goes to "Internet Explorer cannot display the webpage."
I have a self signed server certificate - and the user certs have no association/connection to the server cert. On Tue, Nov 27, 2012 at 9:27 AM, Daniel Mikusa <dmik...@vmware.com> wrote: > On Nov 27, 2012, at 9:17 AM, Will Nordmeyer wrote: > >> Dan, >> >> I tried that - first attempt jstack threw exceptions and I got >> nothing. So I killed the tomcat, took the crlFile back out and ran, >> got a nice jstack showing everything running smoothly. >> >> Shut tomcat down, put the crlFile line back and started up again. >> This time, tomcat6 doesn't hang, but it throws an exception and >> doesn't start... I keep running out of heap space. I wonder why it >> suddenly decided to actually admit the problem instead of just going >> out to lunch. >> >> Caused by: java.lang.OutOfMemoryError: Java heap space >> at java.util.Arrays.copyOf(Arrays.java:2786) >> at java.io.ByteArrayOutputStream.write(ByteArrayOutputStream.java:94) >> at >> sun.security.provider.X509Factory.getTotalBytes(X509Factory.java:658) >> at >> sun.security.provider.X509Factory.engineGenerateCRLs(X509Factory.java:500) >> at >> java.security.cert.CertificateFactory.generateCRLs(CertificateFactory.java:500) >> >> >> I have JAVA_OPTS set so that I have a min of 512MB and a max of 512 MB >> - without the CRL, it loads fine, so the Memory is available. > > Do you have more available memory on the system? I would try doubling the > heap size to 1G and see if that helps. After Tomcat is up, you could attach > a profiler to get the details about how much memory is being consumed. > > Dan > > >> My problem is that the CRL file is 271 MB - I'm not sure how big that >> translates to once Java starts loading it. >> >> --Will >> On Mon, Nov 26, 2012 at 5:17 PM, Daniel Mikusa <dmik...@vmware.com> wrote: >>> On Nov 26, 2012, at 3:35 PM, Will Nordmeyer wrote: >>> If Tomcat appears to be hanging with this option enabled, I would suggest >>> taking a thread dump and including it here. Could provide some clues as to >>> what is happening. >>> >>> http://wiki.apache.org/tomcat/HowTo#How_do_I_obtain_a_thread_dump_of_my_running_webapp_.3F >>> >>> Dan >>> >>> >>>> >>>> If I remove the crlFile reference in the server.xml, everything works >>>> fine (except crl lookups of course). The system starts up, the app is >>>> accessible, it prompts for the certificate... >>>> >>>> Any thoughts on why it would be failing like that would be appreciated. >>>> >>>> --------------------------------------------------------------------- >>>> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org >>>> For additional commands, e-mail: users-h...@tomcat.apache.org >>> >>> >>> --------------------------------------------------------------------- >>> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org >>> For additional commands, e-mail: users-h...@tomcat.apache.org >>> >> >> --------------------------------------------------------------------- >> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org >> For additional commands, e-mail: users-h...@tomcat.apache.org > > --------------------------------------------------------------------- > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org > For additional commands, e-mail: users-h...@tomcat.apache.org > --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
