[ https://issues.apache.org/jira/browse/MESOS-7076?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16597918#comment-16597918 ]
Chun-Hung Hsiao edited comment on MESOS-7076 at 8/30/18 9:40 PM: ----------------------------------------------------------------- [~tillt] I'm not sure if bundling libssl is a good idea. Debian 9's patched libevent 2.0.22 works with OpenSSL 1.1.x and Mesos. If it also works with OpenSSL 1.0.x (which I believe so), we could try to bundle that version of libevent and avoid bundling SSL. If you want to go with this route, I might be able to help after my on-call rotation. was (Author: chhsia0): [~tillt] I'm not sure if bundling libssl is a good idea. Debian 9's patched libevent works with OpenSSL 1.1.x and Mesos. If it also works with OpenSSL 1.0.x (which I believe so), we could try to bundle that version of libevent and avoid bundling SSL. If you want to go with this route, I might be able to help after my on-call rotation. > libprocess tests fail when using libevent 2.1.8 > ----------------------------------------------- > > Key: MESOS-7076 > URL: https://issues.apache.org/jira/browse/MESOS-7076 > Project: Mesos > Issue Type: Bug > Components: build, libprocess, test > Environment: macOS 10.12.3, libevent 2.1.8 (installed via Homebrew) > Reporter: Jan Schlicht > Assignee: Till Toenshoff > Priority: Critical > Labels: ci > > Running {{libprocess-tests}} on Mesos compiled with {{--enable-libevent > --enable-ssl}} on an operating system using libevent 2.1.8, SSL related tests > fail like > {noformat} > [ RUN ] SSLTest.SSLSocket > I0207 15:20:46.017881 2528580544 openssl.cpp:419] CA file path is > unspecified! NOTE: Set CA file path with LIBPROCESS_SSL_CA_FILE=<filepath> > I0207 15:20:46.017904 2528580544 openssl.cpp:424] CA directory path > unspecified! NOTE: Set CA directory path with LIBPROCESS_SSL_CA_DIR=<dirpath> > I0207 15:20:46.017918 2528580544 openssl.cpp:429] Will not verify peer > certificate! > NOTE: Set LIBPROCESS_SSL_VERIFY_CERT=1 to enable peer certificate verification > I0207 15:20:46.017923 2528580544 openssl.cpp:435] Will only verify peer > certificate if presented! > NOTE: Set LIBPROCESS_SSL_REQUIRE_CERT=1 to require peer certificate > verification > WARNING: Logging before InitGoogleLogging() is written to STDERR > I0207 15:20:46.033001 2528580544 openssl.cpp:419] CA file path is > unspecified! NOTE: Set CA file path with LIBPROCESS_SSL_CA_FILE=<filepath> > I0207 15:20:46.033179 2528580544 openssl.cpp:424] CA directory path > unspecified! NOTE: Set CA directory path with LIBPROCESS_SSL_CA_DIR=<dirpath> > I0207 15:20:46.033196 2528580544 openssl.cpp:429] Will not verify peer > certificate! > NOTE: Set LIBPROCESS_SSL_VERIFY_CERT=1 to enable peer certificate verification > I0207 15:20:46.033201 2528580544 openssl.cpp:435] Will only verify peer > certificate if presented! > NOTE: Set LIBPROCESS_SSL_REQUIRE_CERT=1 to require peer certificate > verification > ../../../3rdparty/libprocess/src/tests/ssl_tests.cpp:257: Failure > Failed to wait 15secs for Socket(socket.get()).recv() > [ FAILED ] SSLTest.SSLSocket (15196 ms) > {noformat} > Tests failing are > {noformat} > SSLTest.SSLSocket > SSLTest.NoVerifyBadCA > SSLTest.VerifyCertificate > SSLTest.ProtocolMismatch > SSLTest.ECDHESupport > SSLTest.PeerAddress > SSLTest.HTTPSGet > SSLTest.HTTPSPost > SSLTest.SilentSocket > SSLTest.ShutdownThenSend > SSLVerifyIPAdd/SSLTest.BasicSameProcess/0, where GetParam() = "false" > SSLVerifyIPAdd/SSLTest.BasicSameProcess/1, where GetParam() = "true" > SSLVerifyIPAdd/SSLTest.BasicSameProcessUnix/0, where GetParam() = "false" > SSLVerifyIPAdd/SSLTest.BasicSameProcessUnix/1, where GetParam() = "true" > SSLVerifyIPAdd/SSLTest.RequireCertificate/0, where GetParam() = "false" > SSLVerifyIPAdd/SSLTest.RequireCertificate/1, where GetParam() = "true" > {noformat} -- This message was sent by Atlassian JIRA (v7.6.3#76005)