Symptom
A router or switch running IOS-XE may experience a crash in the IOSd daemon under the "Call Home cert update" process when a trustpool download is happening. Eg:
%PKI-6-TRUSTPOOL_DOWNLOAD_SUCCESS: Trustpool Download is successful
%PKI-4-TRUSTPOOL_DOWNLOAD_FAILURE: Trustpool Download failed
Exception to IOS Thread:
Frame pointer 0xXXXXXXXXXXXX, PC = 0xXXXXXXXXXXXX
UNIX-EXT-SIGNAL: Segmentation fault(11), Process = Call Home cert update
Conditions
- Trustpool download is occurring
- Timing condition leads to a "double free" of memory and therefore crash is not always seen
Workaround
There are no known workarounds for this issue.
As long as a feature is using a trustpool, that device will be susceptible to this issue.
Further Problem Description