You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@mesos.apache.org by bm...@apache.org on 2019/10/22 23:33:43 UTC

[mesos] branch 1.8.x updated (91e6cef -> 37981fa)

This is an automated email from the ASF dual-hosted git repository.

bmahler pushed a change to branch 1.8.x
in repository https://gitbox.apache.org/repos/asf/mesos.git.


    from 91e6cef  Fixed a compilation error in `MockBackend`.
     new 0ce4e87  Logged failed TLS reverse DNS lookups as warnings for 'legacy' scheme.
     new 37981fa  Added MESOS-10017 to the 1.8.2 CHANGELOG.

The 2 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "add" were already present in the repository and have only
been added to this reference.


Summary of changes:
 3rdparty/libprocess/src/posix/libevent/libevent_ssl_socket.cpp | 4 ++--
 CHANGELOG                                                      | 1 +
 2 files changed, 3 insertions(+), 2 deletions(-)


[mesos] 01/02: Logged failed TLS reverse DNS lookups as warnings for 'legacy' scheme.

Posted by bm...@apache.org.
This is an automated email from the ASF dual-hosted git repository.

bmahler pushed a commit to branch 1.8.x
in repository https://gitbox.apache.org/repos/asf/mesos.git

commit 0ce4e87a8137d95ce73122cbce3d6c9e2018f621
Author: Benjamin Mahler <bm...@apache.org>
AuthorDate: Mon Oct 21 19:57:54 2019 -0400

    Logged failed TLS reverse DNS lookups as warnings for 'legacy' scheme.
    
    These were getting logged at VLOG(2), whereas we want all networking
    related errors to be logged as warnings (or errors if appropriate).
    
    Review: https://reviews.apache.org/r/71643
---
 3rdparty/libprocess/src/posix/libevent/libevent_ssl_socket.cpp | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/3rdparty/libprocess/src/posix/libevent/libevent_ssl_socket.cpp b/3rdparty/libprocess/src/posix/libevent/libevent_ssl_socket.cpp
index 29a1bf7..9f37301 100644
--- a/3rdparty/libprocess/src/posix/libevent/libevent_ssl_socket.cpp
+++ b/3rdparty/libprocess/src/posix/libevent/libevent_ssl_socket.cpp
@@ -1172,8 +1172,8 @@ void LibeventSSLSocketImpl::accept_SSL_callback(AcceptRequest* request)
             }
 
             if (hostname.isError()) {
-              VLOG(2) << "Could not determine hostname of peer: "
-                      << hostname.error();
+              LOG(WARNING) << "Reverse DNS lookup for '" << *request->ip << "'"
+                           << " failed: " << hostname.error();
             } else {
               VLOG(2) << "Accepting from " << hostname.get();
               peer_hostname = hostname.get();


[mesos] 02/02: Added MESOS-10017 to the 1.8.2 CHANGELOG.

Posted by bm...@apache.org.
This is an automated email from the ASF dual-hosted git repository.

bmahler pushed a commit to branch 1.8.x
in repository https://gitbox.apache.org/repos/asf/mesos.git

commit 37981fa09ed1b9cc28fd550ac78b4ccaad4eb047
Author: Benjamin Mahler <bm...@apache.org>
AuthorDate: Tue Oct 22 18:24:38 2019 -0400

    Added MESOS-10017 to the 1.8.2 CHANGELOG.
---
 CHANGELOG | 1 +
 1 file changed, 1 insertion(+)

diff --git a/CHANGELOG b/CHANGELOG
index 7410562..c16f68f 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -15,6 +15,7 @@ Release Notes - Mesos - Version 1.8.2 (WIP)
 ** Improvement
   * [MESOS-9889] - Master CPU high due to unexpected foreachkey behaviour in Master::__reregisterSlave.
   * [MESOS-9948] - master::Slave::hasExecutor occupies 37% of a 150 second perf sample.
+  * [MESOS-10017] - Log all reverse DNS lookup failures in 'legacy' TLS (SSL) hostname validation scheme.
 
 
 Release Notes - Mesos - Version 1.8.1