Benno Evers created MESOS-9855:
----------------------------------
Summary: Provide Hooks to Modules for defining hostname validation
policy
Key: MESOS-9855
URL: https://issues.apache.org/jira/browse/MESOS-9855
Project: Mesos
Issue Type: Improvement
Reporter: Benno Evers
After the changes in MESOS-9809 will have landed, operators will be able to
ensure that libprocess-enabled programs are performing RFC6125-compliant TLS
hostname validation on all outgoing connections.
However, client hostname validation will not be done since there's no
*standard* way of doing that. Instead, the application layer should set the
policy on which certificate fields are considered a valid and accepted proof of
identity.
In order to do that, we should provide hooks for Mesos modules, so they can
select the hostname policy for client (and probably also for server) hostname
validation.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
