[
https://issues.apache.org/jira/browse/MESOS-10218?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17316162#comment-17316162
]
prasadkulkarni0711 commented on MESOS-10218:
--------------------------------------------
[~apeters]
Logs on slave:
I0407 14:52:54.539255 248862 slave.cpp:1443] Authenticating with master
[email protected]:5050
I0407 14:52:54.539595 248862 slave.cpp:1452] Using default CRAM-MD5
authenticatee
I0407 14:52:54.539757 248850 authenticatee.cpp:121] Creating new client SASL
connection
W0407 14:52:54.540439 248866 process.cpp:1431] Failed to recv on socket 17 to
peer 'unknown': Connection reset by peer
I0407 14:52:54.540563 248865 slave.cpp:6456] Got exited event for
[email protected]:5050
W0407 14:52:54.540593 248865 slave.cpp:6461] Master disconnected! Waiting for a
new master to be elected
W0407 14:53:07.472601 248866 slave.cpp:1481] Authentication timed out
W0407 14:53:07.472841 248848 slave.cpp:1511] Failed to authenticate with master
[email protected]:5050: Authentication discarded
Logs on master:
W0407 14:52:53.503386 17844 process.cpp:911] Failed to accept socket: Failed
accept: connection error: error:1407609C:SSL
routines:SSL23_GET_CLIENT_HELLO:http request
W0407 14:52:54.540038 17844 process.cpp:911] Failed to accept socket: Failed
accept: connection error: error:1407609C:SSL
routines:SSL23_GET_CLIENT_HELLO:http request
W0407 14:52:55.357010 17844 process.cpp:911] Failed to accept socket: Failed
accept: connection error: error:1407609C:SSL
routines:SSL23_GET_CLIENT_HELLO:http request
W0407 14:53:00.938259 17844 process.cpp:911] Failed to accept socket: Failed
accept: connection error: error:1407609C:SSL
routines:SSL23_GET_CLIENT_HELLO:http request
W0407 14:53:01.743790 17844 process.cpp:911] Failed to accept socket: Failed
accept: connection error: error:1407609C:SSL
routines:SSL23_GET_CLIENT_HELLO:http request
W0407 14:53:03.420369 17844 process.cpp:911] Failed to accept socket: Failed
accept: connection error: error:1407609C:SSL
routines:SSL23_GET_CLIENT_HELLO:http request
W0407 14:53:07.473637 17844 process.cpp:911] Failed to accept socket: Failed
accept: connection error: error:1407609C:SSL
routines:SSL23_GET_CLIENT_HELLO:http request
> Mesos slave fails to connect after enabling ssl
> -----------------------------------------------
>
> Key: MESOS-10218
> URL: https://issues.apache.org/jira/browse/MESOS-10218
> Project: Mesos
> Issue Type: Bug
> Components: agent
> Affects Versions: 1.9.0
> Reporter: prasadkulkarni0711
> Priority: Major
>
> Mesos agent fails to connect to the master after setting the following
> variables:
> LIBPROCESS_SSL_ENABLED=1
> LIBPROCESS_SSL_KEY_FILE=/etc/mesos/conf/ssl/server.key
> LIBPROCESS_SSL_CERT_FILE=/etc/mesos/conf/ssl/server.pem
> LIBPROCESS_SSL_REQUIRE_CERT=false
> LIBPROCESS_SSL_VERIFY_SERVER_CERT=false
> LIBPROCESS_SSL_REQUIRE_CLIENT_CERT=false
> LIBPROCESS_SSL_HOSTNAME_VALIDATION_SCHEME=openssl
> LIBPROCESS_SSL_VERIFY_CERT=false
> LIBPROCESS_SSL_CA_DIR=/etc/mesos/conf/ssl
> LIBPROCESS_SSL_CA_FILE=/etc/mesos/conf/ssl/ca.pem
> LIBPROCESS_SSL_SUPPORT_DOWNGRADE=false
> LIBPROCESS_SSL_VERIFY_IPADD=false
> #LIBPROCESS_SSL_ENABLE_TLS_V1_2=true
> Error in logs:
> Failed to accept socket: Failed accept: connection error: error:1407609C:SSL
> routines:SSL23_GET_CLIENT_HELLO:http request
> Connectivity works after setting:
> LIBPROCESS_SSL_SUPPORT_DOWNGRADE=true
> But then the sandbox fails to open in the web UI:
> Potential reasons:
> * The agent is not accessible
> * The agent timed out or went offline
> With the following error in the logs:
> Failed to recv on socket 38 to peer 'unknown': Failed recv, connection error:
> Connection reset by peer
--
This message was sent by Atlassian Jira
(v8.3.4#803005)