[ 
https://issues.apache.org/jira/browse/MESOS-10218?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17315941#comment-17315941
 ] 

prasadkulkarni0711 commented on MESOS-10218:
--------------------------------------------

[~apeters]  I ran the curl from the slave itself.
I installed it from the repo, deb package.
This is the error I get if I set LIBPROCESS_SSL_SUPPORT_DOWNGRADE=false
{noformat}
W0406 19:33:18.160183 4035273 slave.cpp:6461] Master disconnected! Waiting for 
a new master to be elected
W0406 19:33:18.160634 4035281 process.cpp:1917] Failed to send 
'mesos.internal.AuthenticateMessage' to 'xx.xx.xx.xx:5050', connect: Failed to 
connect to xx.xx.xx.xx:5050: Connection refused
W0406 19:33:24.582101 4035281 slave.cpp:1481] Authentication timed out
W0406 19:33:24.582309 4035276 slave.cpp:1511] Failed to authenticate with 
master mas...@xx.xx.xx.xx:5050: Authentication discarded
W0406 19:33:24.582880 4035281 process.cpp:1480] Failed to link to 
'xx.xx.xx.xx:5050', connect: Failed to connect to xx.xx.xx.xx:5050: Connection 
refused
W0406 19:33:24.583223 4035268 slave.cpp:6461] Master disconnected! Waiting for 
a new master to be elected
W0406 19:33:24.583811 4035281 process.cpp:1917] Failed to send 
'mesos.internal.AuthenticateMessage' to 'xx.xx.xx.xx:5050', connect: Failed to 
connect to xx.xx.xx.xx:5050: Connection refused
W0406 19:33:28.018805 4035264 slave.cpp:1511] Failed to authenticate with 
master mas...@xx.xx.xx.xx:5050: master changed
W0406 19:33:28.022656 4035281 process.cpp:846] Failed to recv on socket 20 to 
peer 'xx.xx.xx.xx:65060': Decoder error
W0406 19:37:19.472417 4035281 process.cpp:846] Failed to recv on socket 21 to 
peer 'xx.xx.xx.xx:37176': Decoder error
W0406 19:37:29.647426 4035281 process.cpp:846] Failed to recv on socket 21 to 
peer 'xx.xx.xx.xx:37242': Decoder error{noformat}

I don't see this error if I set LIBPROCESS_SSL_SUPPORT_DOWNGRADE=true

> Mesos slave fails to connect after enabling ssl
> -----------------------------------------------
>
>                 Key: MESOS-10218
>                 URL: https://issues.apache.org/jira/browse/MESOS-10218
>             Project: Mesos
>          Issue Type: Bug
>          Components: agent
>    Affects Versions: 1.9.0
>            Reporter: prasadkulkarni0711
>            Priority: Major
>
> Mesos agent fails to connect to the master after setting the following 
> variables:
> LIBPROCESS_SSL_ENABLED=1
> LIBPROCESS_SSL_KEY_FILE=/etc/mesos/conf/ssl/server.key
> LIBPROCESS_SSL_CERT_FILE=/etc/mesos/conf/ssl/server.pem
> LIBPROCESS_SSL_REQUIRE_CERT=false
> LIBPROCESS_SSL_VERIFY_SERVER_CERT=false
> LIBPROCESS_SSL_REQUIRE_CLIENT_CERT=false
> LIBPROCESS_SSL_HOSTNAME_VALIDATION_SCHEME=openssl
> LIBPROCESS_SSL_VERIFY_CERT=false
> LIBPROCESS_SSL_CA_DIR=/etc/mesos/conf/ssl
> LIBPROCESS_SSL_CA_FILE=/etc/mesos/conf/ssl/ca.pem
> LIBPROCESS_SSL_SUPPORT_DOWNGRADE=false
> LIBPROCESS_SSL_VERIFY_IPADD=false
> #LIBPROCESS_SSL_ENABLE_TLS_V1_2=true
> Error in logs:
> Failed to accept socket: Failed accept: connection error: error:1407609C:SSL 
> routines:SSL23_GET_CLIENT_HELLO:http request
> Connectivity works after setting:
> LIBPROCESS_SSL_SUPPORT_DOWNGRADE=true
> But then the sandbox fails to open in the web UI:
> Potential reasons:
>  * The agent is not accessible
>  * The agent timed out or went offline
> With the following error in the logs:
> Failed to recv on socket 38 to peer 'unknown': Failed recv, connection error: 
> Connection reset by peer



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to