SSL SERVER ERROR: DMSFRO159E INSUFFICIENT STORAGE AVAILABLE
APAR Identifier ...... PK87640 Last Changed ........ 09/11/02
SSL SERVER ERROR: DMSFRO159E INSUFFICIENT STORAGE AVAILABLE
Symptom ...... IN INCORROUT Status ........... CLOSED PER
Severity ................... 3 Date Closed ......... 09/10/29
Component .......... 5735FAL00 Duplicate of ........
Reported Release ......... 540 Fixed Release ............ 999
Component Name TCP/IP V2 FOR V Special Notice
Current Target Date .. Flags
SCP ...................
Platform ............
Status Detail: SHIPMENT - Packaged solution is available for
shipment.
PE PTF List:
PTF List:
Release 540 : UK51579 available 09/11/02 (1000 )
Release 610 : UK51580 available 09/11/02 (1000 )
Parent APAR:
Child APAR list:
ERROR DESCRIPTION:
As the SSL server handles an increasing number of secure
connections, errors associated with a lack of available
virtual storage are reported. Examples of such messages
follow:
DTCSSL002I mainSSL() started...
...
DTCSSL005E Storage exceeded creating cloneThread
...
DTCSSL005E Storage exceeded creating cloneThread
DTCSSL107E Internal error: Environment does not exist
DTCSSL050E close failed with clientSocket 152 rc: -1 errno: 113
DMSFRO159E Insufficient storage available to satisfy
free storage request from 00F33FD2
CMS
hh:mm:ss * MSG FROM TCPIP: Restarting you because KillClient
called for reason: Client terminated TCP/IP service
As indicated, virtual storage eventually can be exhausted,
leaving the server inoperative, and eligible for restart
by the TCP/IP server.
LOCAL FIX:
None.
PROBLEM SUMMARY:
****************************************************************
* USERS AFFECTED: ALL USERS OF THE Z/VM SSL SERVER *
****************************************************************
* PROBLEM DESCRIPTION: *
****************************************************************
* RECOMMENDATION: APPLY PTF *
****************************************************************
The SSL server can use up all of its available virtual storage
resulting in the server becoming inoperative and eligible
for restart by the TCP/IP server. When this happens, the
below messages may be observed on the console of the SSL
server:
DTCSSL002I mainSSL() started...
...
DTCSSL005E Storage exceeded creating cloneThread
...
DTCSSL005E Storage exceeded creating cloneThread
DTCSSL107E Internal error: Environment does not exist
DTCSSL050E close failed with clientSocket 152 rc: -1 errno: 113
DMSFRO159E Insufficient storage available to satisfy
free storage request from 00F33FD2
CMS
hh:mm:ss * MSG FROM TCPIP: Restarting you because KillClient
called for reason: Client terminated TCP/IP service
This error condition can occur while sending outbound mail using
the z/VM SMTP server configured for secure SMTP. How to
configure the z/VM SMTP server for secure SMTP is described in
"Configuring the Server for Secure SMTP" in the SMTP chapter
of the TCP/IP Planning and Customization book.
PROBLEM CONCLUSION:
Two problems in the SSL server code are addressed by this APAR:
1. After calling gsk_attribute_get_cert_info(), the appropriate
calls to gsk_free_cert_data() will be made.
2. When a connection is ended, the appropriate calls will be
made to the gsk_secure_socket_shutdown() and
gsk_secure_socket_close() routines.
TEMPORARY FIX:
COMMENTS:
MODULES/MACROS: SSLSERV SSLVMAIN
SRLS: NONE
RTN CODES:
CIRCUMVENTION:
MESSAGE TO SUBMITTER:
|
