Hello,
Actually it's way more complicated:
It's related to the use of libcurl-nss: libnss does not support PEM
certificates so it cannot used any of the ones available on a regular
Debian system.
Moreover there's no good way to add this support so I did a dirty
workaround to fix this but I think you should really re-consider the use
of nss variant of libcurl...
More information here:
https://github.com/mesosphere/mesos-deb-packaging/pull/104
Adam.
On 03/28/2017 10:09 AM, Adam Bordelon wrote:
I found https://issues.apache.org/jira/browse/MESOS-7133 but that was
supposedly fixed in 1.1.1 (broken in 1.1.0)
On Tue, Mar 28, 2017 at 12:23 AM, Adam Cecile <[email protected]
<mailto:[email protected]>> wrote:
Hello,
Here is a simple test showing why I cannot upgrade Mesos anymore
(Debian Jessie, using mesosphere packages):
apt-get install mesos=1.1.0-2.0.107.debian81
MESOS_FETCHER_INFO='{ "sandbox_directory": "/tmp/abc", "items": [
{ "uri": { "value": "https://path/to/file }, "action":
"BYPASS_CACHE" } ] }' /usr/libexec/mesos/mesos-fetcher
[...] 0328 09:20:39.361690 129351 fetcher.cpp:547] Fetched
'https://path/to/file' to '/tmp/abc/file'
apt-get install mesos=1.1.1-2.0.1
MESOS_FETCHER_INFO='{ "sandbox_directory": "/tmp/abc", "items": [
{ "uri": { "value": "https://path/to/file }, "action":
"BYPASS_CACHE" } ] }' /usr/libexec/mesos/mesos-fetcher
[...] Failed to fetch 'https://path/to/file': Error downloading
resource: Problem with the SSL CA cert (path? access rights?)
Obviously the URL is working just fine when being retreive with
CURL, WGET or a JAVA app from the server itself.
Any hint would be appreciated !
Best regards, Adam.
