SSL SERVER ERROR: DMSFRO159E INSUFFICIENT STORAGE AVAILABLE

 
 APAR Identifier ...... PK87640      Last Changed ........ 10/03/16
 SSL SERVER ERROR: DMSFRO159E INSUFFICIENT STORAGE AVAILABLE
 
 Symptom ...... IN INCORROUT         Status ........... CLOSED  PER
 Severity ................... 3      Date Closed ......... 09/10/29
 Component .......... 5735FAL00      Duplicate of ........
 Reported Release ......... 540      Fixed Release ............ 999
 Component Name TCP/IP V2 FOR V      Special Notice
 Current Target Date ..              Flags
 SCP ...................
 Platform ............
 
 Status Detail: SHIPMENT - Packaged solution is available for
                           shipment.
 
 PE PTF List:
 
 PTF List:
 Release 540   : UK51579 available 09/11/02 (1001 )
 Release 610   : UK51580 available 09/11/02 (1001 )
 
 Parent APAR:
 Child APAR list:
 
 ERROR DESCRIPTION:
 As the SSL server handles an increasing number of secure
 connections, errors associated with a lack of available
 virtual storage are reported.  Examples of such messages
 follow:
 
 DTCSSL002I mainSSL() started...
 ...
 DTCSSL005E Storage exceeded creating cloneThread
 ...
 DTCSSL005E Storage exceeded creating cloneThread
 DTCSSL107E Internal error: Environment does not exist
 DTCSSL050E close failed with  clientSocket 152 rc: -1 errno: 113
 DMSFRO159E Insufficient storage available to satisfy
            free storage request from 00F33FD2
 CMS
 hh:mm:ss  * MSG FROM TCPIP: Restarting you because KillClient
    called for reason:  Client terminated TCP/IP service
 
 As indicated, virtual storage eventually can be exhausted,
 leaving the server inoperative, and eligible for restart
 by the TCP/IP server.
 
 LOCAL FIX:
 None.
 
 PROBLEM SUMMARY:
 ****************************************************************
 * USERS AFFECTED: ALL USERS OF THE Z/VM SSL SERVER             *
 ****************************************************************
 * PROBLEM DESCRIPTION:                                         *
 ****************************************************************
 * RECOMMENDATION: APPLY PTF                                    *
 ****************************************************************
 The SSL server can use up all of its available virtual storage
 resulting in the server becoming inoperative and eligible
 for restart by the TCP/IP server.  When this happens, the
 below messages may be observed on the console of the SSL
 server:
 
 DTCSSL002I mainSSL() started...
 ...
 DTCSSL005E Storage exceeded creating cloneThread
 ...
 DTCSSL005E Storage exceeded creating cloneThread
 DTCSSL107E Internal error: Environment does not exist
 DTCSSL050E close failed with  clientSocket 152 rc: -1 errno: 113
 DMSFRO159E Insufficient storage available to satisfy
            free storage request from 00F33FD2
 CMS
 hh:mm:ss  * MSG FROM TCPIP: Restarting you because KillClient
    called for reason:  Client terminated TCP/IP service
 
 This error condition can occur while sending outbound mail using
 the z/VM SMTP server configured for secure SMTP.  How to
 configure the z/VM SMTP server for secure SMTP is described in
 "Configuring the Server for Secure SMTP" in the SMTP chapter
 of the TCP/IP Planning and Customization book.
 
 PROBLEM CONCLUSION:
 Two problems in the SSL server code are addressed by this APAR:
 
 1. After calling gsk_attribute_get_cert_info(), the appropriate
    calls to gsk_free_cert_data() will be made.
 
 2. When a connection is ended, the appropriate calls will be
    made to the gsk_secure_socket_shutdown() and
    gsk_secure_socket_close() routines.
 
 TEMPORARY FIX:
 
 COMMENTS:
 
 MODULES/MACROS:   SSLSERV  SSLVMAIN
 
 SRLS:      NONE
 
 RTN CODES:
 
 CIRCUMVENTION:
 
 MESSAGE TO SUBMITTER: