BUG: OCSP staple causes hitch reload (first reload, no certs changes) doubles memory usage and never drops

[iammeken]

Then following reloads (no certs changes) will increase a part of memory and never release it, and until total memory is exhausted

this bug is critical especially when you are facing thousands of certs.

Please consider a fix, since this bug exists in ubuntu 20.04/22.04/24.04.

Disable OCSP will fix the bug (for the time being):

ocsp-dir = ""

#374

I hope hitch is still an active project.

[iammeken]

Another fix is to set ocsp dir to tmpfs (memory), but you will face high cpu load for for downloading ocsp in first several minutes and retrieve all ocsp after reboot.

Something must be wrong with hitch coding with hard disk.