I have been enabling tls on mesos with these instructions [0] also 
enabled the marathon ssl. But it looks like this is not complete. I am 
not able to deploy tasks anymore. Is this indeed enough to configure and 
is this a marathon issue or is there more that needs to be done? I can 
only deploy on slave that are set downgrade.

cat << EOF >> /etc/default/mesos
IP=`dig +short $(hostname).local`

LIBPROCESS_SSL_ENABLED=1
LIBPROCESS_SSL_SUPPORT_DOWNGRADE=0
LIBPROCESS_SSL_KEY_FILE=/etc/pki/tls/private/`hostname`.local.key
LIBPROCESS_SSL_CERT_FILE=/etc/pki/tls/certs/`hostname`.local.crt
LIBPROCESS_SSL_VERIFY_CERT=1
LIBPROCESS_SSL_CA_FILE="/etc/pki/ca-trust/source/own-ca.crt" 
EOF


[0] http://mesos.apache.org/documentation/latest/ssl/

Reply via email to