Re: [courier-users] submission problems

[Sam V. <mr...@co...>]

co...@ec... writes:

> btw: I attached strace to the esmtpd-ssl part of courier (I don't want to  
> post the complete output right now, I'm not sure, that it doesn't contain

I did not see anything that was attached.

> appears to read all certs in /etc/ssl/certs/, after which it crashes with:
>
> [pid 381845] mmap(NULL, 1048576, PROT_READ|PROT_WRITE, MAP_PRIVATE| 
> MAP_ANONYMOUS, -1, 0) = -1 ENOMEM (Cannot allocate memory)

This looks like it's running out of memory.

Try to increase the ULIMIT setting in the esmtpd configuration file.

> [pid 381845] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR,  
> si_addr=0x8c} ---
> [pid 381845] +++ killed by SIGSEGV (core dumped) +++

The GnuTLS library is probably not checking if malloc failed, and just  
assumes that it did, so it immediately crashes.

>
> Maybe the crux is this line, which I have in esmtpd-ssl but not imapd-ssl  
> (for years):
> AUTH_REQUIRED=1

AUTH_REQUIRED is correct, for esmtpd-ssl. There's nothing wrong with  
requiring authentication on the SSL port.

> Indeed, when I change
> TLS_TRUSTCERTS=/etc/ssl/certs/
> to
> TLS_TRUSTCERTS=/dev/null
> and restart courier-esmtpd-ssl, then submission works!

I suspect that esmtpd is running with a lower ulimit that imapd.