loop overflow when filtering FindObjetcs!
playmobil77d opened this issue · 2 comments
Helo,
We are using caml-crush behind an apache server.
A couple of day ago, we had a strange behavior:
We had some of connection that were rejected on the Apache with the error
"SSL Library Error: -12182 Unrecognized name"
In the network dump, in fact the client hello were rejected but the server_name was good.
On caml-crush , we had those error just before the first occurence on Apache:
[PKCS#11 FILTER pid 24242] ERROR: loop overflow when filtering FindObjetcs!
The strange thing is that other connection were good at the same time. And after a restart of caml-crush, I solved the problem.
I am trying to understand this behavior and what could cause this ?
Could you help me on that ?
Hi,
The "loop overflow" error occurs when FindObjetcs tries to filter more than max_objects_loop = 100000, that is a constant in the code (see the file src/filter/filter/filter.ml). This means that you have a huge amount of objects on your token (is it the case?). If yes and if you consider this as normal (100000 objects seems to be quite big for a session, but this surely depends on your token and use case ...) you can increase this limit in the code if you want.
Regarding the SSL error : does it happen before or after the FindObjetcs overflow error?
Regards,
Closing as didn't get any update on this.