What other PKI operations my server could be doing with NSS v3.8 that would involve CRLs if all my clients are connecting anonymously?
In any case, I did more investigating and it looks like the "Bus error" which is causing the app to dump core is being caused by the system running out of system swap space, or at least running so low that the NSS app dumps core. I noticed that my server app process virtual mem size goes up to ~12MB (when the CRLs are imported in the cert db) and since my app is multi-processed there can be up to 10 processes like this, which causes the swap space to be used up very quickly...Is it normal for an NSS server app to grow that much? What would it grow markedly more when the CRLs are imported? It looks like the CRLs are loaded in memory even when not needed? -- P
