Uploaded image for project: 'Mesos'
  1. Mesos
  2. MESOS-9773

Log the peer address during SSL handshake failure.

    XMLWordPrintableJSON

    Details

    • Type: Improvement
    • Status: Accepted
    • Priority: Major
    • Resolution: Unresolved
    • Affects Version/s: None
    • Fix Version/s: None
    • Component/s: libprocess
    • Labels:

      Description

      Recently, peer address logging was added to most socket errors per MESOS. However, the case where an non-SSL connection arrives when we have SSL-only mandated, the following confusing error is printed:

      "process.cpp Failed to accept socket: Failed accept: connection error: error:00000000:lib(0):func(0):reason(0)"

      We should be able to avoid the confusing message here as well as include the peer address, so that it's easier to know where the connection is coming from.

        Attachments

          Issue Links

          is related to

          Improvement - An improvement or enhancement to an existing feature or task. MESOS-10017 Log all reverse DNS lookup failures in 'legacy' TLS (SSL) hostname validation scheme.

          • Major - Major loss of function.
          • Resolved
          relates to

          Improvement - An improvement or enhancement to an existing feature or task. MESOS-9340 Log all socket errors in libprocess.

          • Major - Major loss of function.
          • Resolved

            Activity

              People

              • Assignee:
                Unassigned
                Reporter:
                bmahler Benjamin Mahler
              • Votes:
                0 Vote for this issue
                Watchers:
                2 Start watching this issue

                Dates

                • Created:
                  Updated: