Benno Evers created MESOS-9855: ---------------------------------- Summary: Provide Hooks to Modules for defining hostname validation policy Key: MESOS-9855 URL: https://issues.apache.org/jira/browse/MESOS-9855 Project: Mesos Issue Type: Improvement Reporter: Benno Evers
After the changes in MESOS-9809 will have landed, operators will be able to ensure that libprocess-enabled programs are performing RFC6125-compliant TLS hostname validation on all outgoing connections. However, client hostname validation will not be done since there's no *standard* way of doing that. Instead, the application layer should set the policy on which certificate fields are considered a valid and accepted proof of identity. In order to do that, we should provide hooks for Mesos modules, so they can select the hostname policy for client (and probably also for server) hostname validation. -- This message was sent by Atlassian JIRA (v7.6.3#76005)