[MESOS-9773] Log the peer address during SSL handshake failure.

• Type: Improvement
• Status: Accepted
• Priority: Major
• Resolution: Unresolved
• Component/s: libprocess
• Labels: foundations
• Assignee: Unassigned
• Reporter: Benjamin Mahler
• Created: 07/May/19 15:22
• Updated: 22/Oct/19 00:32

Description

Recently, peer address logging was added to most socket errors per MESOS. However, the case where an non-SSL connection arrives when we have SSL-only mandated, the following confusing error is printed:

"process.cpp Failed to accept socket: Failed accept: connection error: error:00000000:lib(0):func(0):reason(0)"

We should be able to avoid the confusing message here as well as include the peer address, so that it's easier to know where the connection is coming from.

Issue Links

• is related to: MESOS-10017 Log all reverse DNS lookup failures in 'legacy' TLS (SSL) hostname validation scheme.
• relates to: MESOS-9340 Log all socket errors in libprocess.