[MESOS-3753] Test the HTTP Scheduler library with SSL enabled

• Type: Story
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.2.0
• Component/s: framework, HTTP API, test
• Labels: mesosphere security
• Epic Link: Scheduler API v1 improvements
• Sprint: Mesosphere Sprint 39, Mesosphere Sprint 40, Mesosphere Sprint 41, Mesosphere Sprint 42, Mesosphere Sprint 44, Mesosphere Sprint 45, Mesosphere Sprint 46, Mesosphere Sprint 47, Mesosphere Sprint 48
• Story Points: 13
• Assignee: Greg Mann
• Reporter: Joseph Wu
• Shepherd: Joseph Wu
• Created: 16/Oct/15 22:27
• Updated: 26/Nov/18 12:22
• Resolved: 26/Nov/18 12:22

Description

Currently, the HTTP Scheduler library does not support SSL-enabled Mesos.
(You can manually test this by spinning up an SSL-enabled master and attempt to run the event-call framework example against it.)

We need to add tests that check the HTTP Scheduler library against SSL-enabled Mesos:

• with downgrade support,
• with required framework/client-side certifications,
• with/without verification of certificates (master-side),
• with/without verification of certificates (framework-side),
• with a custom certificate authority (CA)

These options should be controlled by the same environment variables found on the SSL user doc.

Note: This issue will be broken down into smaller sub-issues as bugs/problems are discovered.

Issue Links

• contains: MESOS-3976 C++ HTTP Scheduler Library does not work with SSL enabled
• is blocked by: MESOS-3820 Test-only libprocess reinitialization
• is blocked by: MESOS-3762 Refactor SSLTest fixture such that MesosTest can use the same helpers.
• is related to: MESOS-5966 Add libprocess HTTP tests with SSL support
• relates to: MESOS-3975 SSL build of mesos causes flaky testsuite.