-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/70749/
-----------------------------------------------------------
(Updated June 20, 2019, 5:48 p.m.)
Review request for mesos, Alexander Rukletsov, Joseph Wu, and Till Toenshoff.
Changes
-------
Renamed algorithm -> scheme
Summary (updated)
-----------------
Introduced optional new scheme for hostname validation.
Bugs: MESOS-9809
https://issues.apache.org/jira/browse/MESOS-9809
Repository: mesos
Description (updated)
-------
This commit introduces a new libprocess SSL flag
`hostname_validation_scheme`, which can be used to select
between the previous hostname validation behaviour and a new
option to use standardized OpenSSL algorithms to handle
hostname validation as part of the
As a nice side-effect, the new scheme gets rid of reverse DNS
lookups during TLS connection establishment, which used to be
a common source of hard-to-debug unresponsiveness in Mesos
components.
See `docs/ssl.md` in the follow-up commit for details of and
differences between the schemes.
Diffs (updated)
-----
3rdparty/libprocess/include/process/ssl/flags.hpp
f3483f97f93bb29117b2c78f0f2ed9735d9c4b3a
3rdparty/libprocess/src/openssl.hpp 17bec246e516261f8d772f1647c17f092fae82d1
3rdparty/libprocess/src/openssl.cpp e7dbd67913fa8e7fbbf60dee428e7e38895f86ce
3rdparty/libprocess/src/posix/libevent/libevent_ssl_socket.hpp
6ef5a86566af3439cfe0b06ab3576076623f7be0
3rdparty/libprocess/src/posix/libevent/libevent_ssl_socket.cpp
29a1bf71c1df9d80370455a6269ecea0ec4193b0
Diff: https://reviews.apache.org/r/70749/diff/4/
Changes: https://reviews.apache.org/r/70749/diff/3-4/
Testing
-------
Todo!
Thanks,
Benno Evers
