Using TLS in Mesos 1.9

[Ajay V <aj...@gmail.com>]

Hi Mesos user group,

I was experimenting with TLS in mesos and was wondering what is the best
way the key password is supplied when starting master and agents. I see
there are environment variables to supply the key file (
LIBPROCESS_SSL_KEY_FILE) but could not find a variable to supply the
password.

When scripting the start scripts, is there a way to provide this password
from a file or are there other options?

Regards,
Ajay

Re: Using TLS in Mesos 1.9

[Ajay V <aj...@gmail.com>]

Thank you for the response Charles. Password protected key files are
supported. When running the startup scripts, the stdin prompts for the key
password. This, is however not very friendly.
I was wondering if there was an option to supply it from a file or some
other nicer alternatives.

Worst case, I plan to use the decrypted method you pointed out.

Regards,
Ajay

On Fri, Dec 3, 2021 at 12:51 AM Charles-François Natali <cf...@gmail.com>
wrote:

> Hi Ajay,
>
> I haven't used TLS much with Mesos but I don't think password
> protected key files are supported - I'm not sure how useful that would
> be in practice anyway.
> I think your best bet is to decrypt it using e.g. openssl and provide
> that decrypted key file instead.
>
> Cheers,
>
> Charles
>
>
>
>
> Le mer. 1 déc. 2021 à 04:51, Ajay V <aj...@gmail.com> a écrit :
> >
> > Hi Mesos user group,
> >
> > I was experimenting with TLS in mesos and was wondering what is the best
> way the key password is supplied when starting master and agents. I see
> there are environment variables to supply the key file
> (LIBPROCESS_SSL_KEY_FILE) but could not find a variable to supply the
> password.
> >
> > When scripting the start scripts, is there a way to provide this
> password from a file or are there other options?
> >
> > Regards,
> > Ajay
>
-- 
Regards,
Ajay

Re: Using TLS in Mesos 1.9

[Charles-François Natali <cf...@gmail.com>]

Hi Ajay,

I haven't used TLS much with Mesos but I don't think password
protected key files are supported - I'm not sure how useful that would
be in practice anyway.
I think your best bet is to decrypt it using e.g. openssl and provide
that decrypted key file instead.

Cheers,

Charles




Le mer. 1 déc. 2021 à 04:51, Ajay V <aj...@gmail.com> a écrit :
>
> Hi Mesos user group,
>
> I was experimenting with TLS in mesos and was wondering what is the best way the key password is supplied when starting master and agents. I see there are environment variables to supply the key file (LIBPROCESS_SSL_KEY_FILE) but could not find a variable to supply the password.
>
> When scripting the start scripts, is there a way to provide this password from a file or are there other options?
>
> Regards,
> Ajay