000025119 - Dispatcher fails with java OutOfMemoryError

Document created by RSA Customer Support Employee on Jun 16, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000025119
Applies ToClearTrust 5.5.3
Agent connection to the dispatchers and aservers is done via authenticated SSL.
A webserver agent's SSL certificate has expired.
IssueJava OutOfMemoryErrors appear in the dispatcher logs
ClearTrust agents will be unable to connect to the dispatcher to retrieve a list of aservers.
Users will receive HTTP 500 errors when they try to access protected content.
CauseDue to a problem with the way that the dispatcher handled SSL connections, the agent with the expired certificate creates several hundred connetions to the dispatcher.
These connection are never properly torn down, and the dispatcher eventually simply runs out of resources - in this case memory.
ResolutionThis issue has been fixed in hotfix for ClearTrust.  Please contact RSA Technical Support to request this hotifx.
Legacy Article IDa35504