[MESOS-10017] Log all reverse DNS lookup failures in 'legacy' TLS (SSL) hostname validation scheme.

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.5.4, 1.6.3, 1.7.3, 1.8.2, 1.9.1, 1.10.0
• Component/s: libprocess
• Labels: foundations
• Target Version/s: 1.5.4, 1.6.3, 1.7.3, 1.8.2, 1.9.1
• Sprint: Foundations: RI-19 57
• Story Points: 1
• Assignee: Benjamin Mahler
• Reporter: Benjamin Mahler
• Created: 22/Oct/19 00:04
• Updated: 23/Oct/19 17:38
• Resolved: 22/Oct/19 22:05

Description

There were being logged at VLOG(2):

https://github.com/apache/mesos/blob/1.9.0/3rdparty/libprocess/src/openssl.cpp#L859-L860

In the same spirit as MESOS-9340, we'd like to log all networking related errors as warnings and include any relevant information (IP address, etc).

Issue Links

• relates to: MESOS-9340 Log all socket errors in libprocess.
• relates to: MESOS-9787 Log slow SSL (TLS) peer reverse DNS lookup.
• relates to: MESOS-9773 Log the peer address during SSL handshake failure.