Hi Torsten,
We use:
> vi /etc/tomcat5/tomcat5.conf
...
JAVA_OPTS="-server -Xms512m -Xmx4096m -Dglite.log.path=/opt/glite/var/log"
...
Cheers
Andreas
On Thu, 23 Feb 2012, Torsten Harenberg wrote:
> Dear all,
>
> only after 2 weeks of running, our CREAM CE died with
>
> [root@cream-ce tomcat5]# cat catalina.out
> Exception in thread "Timer-3" java.lang.OutOfMemoryError: Java heap space
> at org.bouncycastle.asn1.ASN1InputStream.buildObject(Unknown Source)
> at org.bouncycastle.asn1.ASN1InputStream.readObject(Unknown Source)
> at org.bouncycastle.asn1.ASN1InputStream.buildEncodableVector(Unknown Source)
> at org.bouncycastle.asn1.ASN1InputStream.buildDEREncodableVector(Unknown Source)
> at org.bouncycastle.asn1.ASN1InputStream.buildObject(Unknown Source)
> at org.bouncycastle.asn1.ASN1InputStream.readObject(Unknown Source)
> at org.bouncycastle.asn1.ASN1InputStream.buildEncodableVector(Unknown Source)
> at org.bouncycastle.asn1.ASN1InputStream.buildDEREncodableVector(Unknown Source)
> at org.bouncycastle.asn1.ASN1InputStream.buildObject(Unknown Source)
> at org.bouncycastle.asn1.ASN1InputStream.readObject(Unknown Source)
> at org.bouncycastle.asn1.ASN1InputStream.buildEncodableVector(Unknown Source)
> at org.bouncycastle.asn1.ASN1InputStream.buildDEREncodableVector(Unknown Source)
> at org.bouncycastle.asn1.ASN1InputStream.buildObject(Unknown Source)
> at org.bouncycastle.asn1.ASN1InputStream.readObject(Unknown Source)
> at org.bouncycastle.asn1.ASN1InputStream.buildEncodableVector(Unknown Source)
> at org.bouncycastle.asn1.ASN1InputStream.buildDEREncodableVector(Unknown Source)
> at org.bouncycastle.asn1.ASN1InputStream.buildObject(Unknown Source)
> at org.bouncycastle.asn1.ASN1InputStream.readObject(Unknown Source)
> at org.bouncycastle.jce.provider.PEMUtil.readPEMObject(Unknown Source)
> at org.bouncycastle.jce.provider.JDKX509CertificateFactory.readPEMCRL(Unknown Source)
> at org.bouncycastle.jce.provider.JDKX509CertificateFactory.engineGenerateCRL(Unknown Source)
> at java.security.cert.CertificateFactory.generateCRL(CertificateFactory.java:479)
> at org.glite.voms.PKIUtils.loadCRL(PKIUtils.java:907)
> at org.glite.voms.PKIUtils.readObject(PKIUtils.java:931)
> at org.glite.voms.PKIStore.getObject(PKIStore.java:713)
> at org.glite.voms.PKIStore.getForCA(PKIStore.java:594)
> at org.glite.voms.PKIStore.load(PKIStore.java:461)
> at org.glite.voms.PKIStore.<init>(PKIStore.java:291)
> at org.glite.voms.PKIStore.refresh(PKIStore.java:182)
> at org.glite.voms.PKIStore$Refreshener.run(PKIStore.java:158)
> at java.util.TimerThread.mainLoop(Timer.java:534)
> at java.util.TimerThread.run(Timer.java:484)
>
> Can anyone recommend "secure" settings in tomcat5.conf?
>
> Thanks
>
> Torsten
>
>
> --
> <><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><>
> <> <>
> <> Dr. Torsten Harenberg [log in to unmask] <>
> <> Bergische Universitaet <>
> <> FB C - Physik Tel.: +49 (0)202 439-3521 <>
> <> Gaussstr. 20 Fax : +49 (0)202 439-2811 <>
> <> 42097 Wuppertal <>
> <> <>
> <><><><><><><>< Of course it runs NetBSD http://www.netbsd.org ><>
>
>
>
# Andreas Gellrich
# DESY IT / Grid Computing
# 2b/317, Notkestr. 85, D-22607 Hamburg, +49 40 8998 2732
|