You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@mesos.apache.org by Douglas Nelson <it...@gmail.com> on 2016/07/06 19:33:40 UTC
Setting up SSL for mesos
I attempted to set up SSL following this guide:
http://mesos.apache.org/documentation/latest/ssl/
I'm able to hit the WebUI with http but using https gives me nothing. I
must be missing something. Here are the steps I'm taking:
1. I downloaded 0.28.2 from here:
https://github.com/apache/mesos/releases
2. I ran ./configure --enable-libevent --enable-ssl
3. Then I ran make and make install
4. I set the following environment variables:
- export SSL_ENABLED=1
- export SSL_SUPPORT_DOWNGRADE=0
- export SSL_KEY_FILE=<path>
- export SSL_CERT_FILE=<path>
5. Finally, I ran ./bin/mesos-master.sh --ip=127.0.0.1
--work_dir=/var/lib/mesos
I can provide any additional information if needed. Thanks!
Also, I read that SSL would be included in mesosphere's nightly builds:
https://open.mesosphere.com/downloads/mesos-nightly/
How stable are those builds and has SSL already been included?
-Doug Nelson
Re: Setting up SSL for mesos
Posted by Douglas Nelson <it...@gmail.com>.
It must be an issue with my build. I just tried building on a fresh VM and
'make' ended with the following:
cp: cannot stat ‘../../src/python/cli/src/mesos/__init__.py’: No such file
or directory
make[2]: *** [python/cli/src/mesos/__init__.py] Error 1
make[2]: Leaving directory `/mesos/mesos-0.28.2/build/src'
make[1]: *** [all] Error 2
make[1]: Leaving directory `/mesos/mesos-0.28.2/build/src'
make: *** [all-recursive] Error 1
Any thoughts on what would be throwing the error?
On Wed, Jul 6, 2016 at 3:06 PM, Kamil Wokitajtis <wo...@gmail.com>
wrote:
> export SSL_ENABLED=true
> export SSL_KEY_FILE=/etc/mesos/ssl/key.pem
> export SSL_CERT_FILE=/etc/mesos/ssl/cert.pem
>
> 2016-07-06 23:05 GMT+02:00 Kamil Wokitajtis <wo...@gmail.com>:
>
>> For SSL support on 0.28.2 I am exporting only three variables and it
>> works like charm:
>>
>>
>> 2016-07-06 21:33 GMT+02:00 Douglas Nelson <it...@gmail.com>:
>>
>>> I attempted to set up SSL following this guide:
>>> http://mesos.apache.org/documentation/latest/ssl/
>>>
>>> I'm able to hit the WebUI with http but using https gives me nothing. I
>>> must be missing something. Here are the steps I'm taking:
>>>
>>>
>>> 1. I downloaded 0.28.2 from here:
>>> https://github.com/apache/mesos/releases
>>> 2. I ran ./configure --enable-libevent --enable-ssl
>>> 3. Then I ran make and make install
>>> 4. I set the following environment variables:
>>> - export SSL_ENABLED=1
>>> - export SSL_SUPPORT_DOWNGRADE=0
>>> - export SSL_KEY_FILE=<path>
>>> - export SSL_CERT_FILE=<path>
>>> 5. Finally, I ran ./bin/mesos-master.sh --ip=127.0.0.1
>>> --work_dir=/var/lib/mesos
>>>
>>> I can provide any additional information if needed. Thanks!
>>>
>>> Also, I read that SSL would be included in mesosphere's nightly builds:
>>> https://open.mesosphere.com/downloads/mesos-nightly/
>>>
>>> How stable are those builds and has SSL already been included?
>>>
>>> -Doug Nelson
>>>
>>
>>
>
Re: Setting up SSL for mesos
Posted by Kamil Wokitajtis <wo...@gmail.com>.
export SSL_ENABLED=true
export SSL_KEY_FILE=/etc/mesos/ssl/key.pem
export SSL_CERT_FILE=/etc/mesos/ssl/cert.pem
2016-07-06 23:05 GMT+02:00 Kamil Wokitajtis <wo...@gmail.com>:
> For SSL support on 0.28.2 I am exporting only three variables and it works
> like charm:
>
>
> 2016-07-06 21:33 GMT+02:00 Douglas Nelson <it...@gmail.com>:
>
>> I attempted to set up SSL following this guide:
>> http://mesos.apache.org/documentation/latest/ssl/
>>
>> I'm able to hit the WebUI with http but using https gives me nothing. I
>> must be missing something. Here are the steps I'm taking:
>>
>>
>> 1. I downloaded 0.28.2 from here:
>> https://github.com/apache/mesos/releases
>> 2. I ran ./configure --enable-libevent --enable-ssl
>> 3. Then I ran make and make install
>> 4. I set the following environment variables:
>> - export SSL_ENABLED=1
>> - export SSL_SUPPORT_DOWNGRADE=0
>> - export SSL_KEY_FILE=<path>
>> - export SSL_CERT_FILE=<path>
>> 5. Finally, I ran ./bin/mesos-master.sh --ip=127.0.0.1
>> --work_dir=/var/lib/mesos
>>
>> I can provide any additional information if needed. Thanks!
>>
>> Also, I read that SSL would be included in mesosphere's nightly builds:
>> https://open.mesosphere.com/downloads/mesos-nightly/
>>
>> How stable are those builds and has SSL already been included?
>>
>> -Doug Nelson
>>
>
>
Re: Setting up SSL for mesos
Posted by Kamil Wokitajtis <wo...@gmail.com>.
For SSL support on 0.28.2 I am exporting only three variables and it works
like charm:
2016-07-06 21:33 GMT+02:00 Douglas Nelson <it...@gmail.com>:
> I attempted to set up SSL following this guide:
> http://mesos.apache.org/documentation/latest/ssl/
>
> I'm able to hit the WebUI with http but using https gives me nothing. I
> must be missing something. Here are the steps I'm taking:
>
>
> 1. I downloaded 0.28.2 from here:
> https://github.com/apache/mesos/releases
> 2. I ran ./configure --enable-libevent --enable-ssl
> 3. Then I ran make and make install
> 4. I set the following environment variables:
> - export SSL_ENABLED=1
> - export SSL_SUPPORT_DOWNGRADE=0
> - export SSL_KEY_FILE=<path>
> - export SSL_CERT_FILE=<path>
> 5. Finally, I ran ./bin/mesos-master.sh --ip=127.0.0.1
> --work_dir=/var/lib/mesos
>
> I can provide any additional information if needed. Thanks!
>
> Also, I read that SSL would be included in mesosphere's nightly builds:
> https://open.mesosphere.com/downloads/mesos-nightly/
>
> How stable are those builds and has SSL already been included?
>
> -Doug Nelson
>
Re: Setting up SSL for mesos
Posted by Kamil Wokitajtis <wo...@gmail.com>.
If you only set *SSL_ENABLED=true, *mesos would not start and throw error
that certificate and key variables are not exported.
So I assume mesos does not see SSL_ENABLED env variable in your case.
Do you run mesos from the same shell as you do the variables export ?
2016-07-07 20:53 GMT+02:00 Douglas Nelson <it...@gmail.com>:
> I rebuilt from scratch with SSL support and got no errors. I only set *export
> SSL_ENABLED=true* and then I ran the mesos-master.
>
> No errors were thrown and I can see the web UI via HTTP. I double checked
> that I was running the .sh from the build folder I created. Is mesos not
> connecting with the environment variable I set for some reason?
>
>
>
> On Wed, Jul 6, 2016 at 2:20 PM, Joseph Wu <jo...@mesosphere.io> wrote:
>
>> If you can see the WebUI via HTTP, without downgrade support, you might
>> be inadvertently running a different version of Mesos than the one you
>> built.
>>
>> You can quickly sanity check this by removing either SSL_KEY_FILE or
>> SSL_CERT_FILE and starting your master. If your build has SSL support, it
>> should immediately exit with an error message.
>>
>>
>> On Wed, Jul 6, 2016 at 12:33 PM, Douglas Nelson <it...@gmail.com>
>> wrote:
>> >
>> > I attempted to set up SSL following this guide:
>> http://mesos.apache.org/documentation/latest/ssl/
>> >
>> > I'm able to hit the WebUI with http but using https gives me nothing. I
>> must be missing something. Here are the steps I'm taking:
>> >
>> > I downloaded 0.28.2 from here: https://github.com/apache/mesos/releases
>> > I ran ./configure --enable-libevent --enable-ssl
>> > Then I ran make and make install
>> > I set the following environment variables:
>> >
>> > export SSL_ENABLED=1
>> > export SSL_SUPPORT_DOWNGRADE=0
>> > export SSL_KEY_FILE=<path>
>> > export SSL_CERT_FILE=<path>
>> >
>> > Finally, I ran ./bin/mesos-master.sh --ip=127.0.0.1
>> --work_dir=/var/lib/mesos
>> >
>> > I can provide any additional information if needed. Thanks!
>> >
>> > Also, I read that SSL would be included in mesosphere's nightly builds:
>> https://open.mesosphere.com/downloads/mesos-nightly/
>> >
>> > How stable are those builds and has SSL already been included?
>> >
>> > -Doug Nelson
>>
>>
>
Re: Setting up SSL for mesos
Posted by Joseph Wu <jo...@mesosphere.io>.
Probably not relevant. (I ran ldd on CentOS 7.)
Which Ubuntu are you running? And what shell?
Also, try running `make check` up until you see the libprocess tests.
There are a couple of SSL tests there. (i.e. SSLTest.SSLSocket)
If, for some inexplicable reason, your build is linking but not using SSL,
those tests won't show up.
On Thu, Jul 7, 2016 at 12:40 PM, Douglas Nelson <it...@gmail.com> wrote:
> ldd src/.libs/mesos-master | grep ssl returns:
>
> libevent_openssl-2.0.so.5 =>
> /usr/lib/x86_64-linux-gnu/libevent_openssl-2.0.so.5
> libssl.so.1.0.0 => /lib/x86_64-linux-gnu/libssl.so.1.0.0
>
> So I am missing the libssl3.so line. Is that another package I need to
> install as a prerequisite? In case it's relevant, I'm running ubuntu.
>
> On Thu, Jul 7, 2016 at 1:14 PM, Joseph Wu <jo...@mesosphere.io> wrote:
>
>> Can you double-check if your master is linking to openssl?
>>
>> From your build folder, you should get something like:
>> ldd src/.libs/mesos-master | grep ssl
>> libevent_openssl-2.0.so.5 => /lib64/libevent_openssl-2.0.so.5
>> libssl.so.10 => /lib64/libssl.so.10
>> libssl3.so => /lib64/libssl3.so
>>
>> There doesn't seem to be anything wrong with your configure/build steps.
>> And your environment variables setup should work on any sane Unix shell.
>> (Perhaps inline the environment variable? SSL_ENABLED=true
>> ./mesos-master.sh ...)
>>
>> On Thu, Jul 7, 2016 at 11:53 AM, Douglas Nelson <it...@gmail.com>
>> wrote:
>>
>>> I rebuilt from scratch with SSL support and got no errors. I only set *export
>>> SSL_ENABLED=true* and then I ran the mesos-master.
>>>
>>> No errors were thrown and I can see the web UI via HTTP. I double
>>> checked that I was running the .sh from the build folder I created. Is
>>> mesos not connecting with the environment variable I set for some reason?
>>>
>>>
>>>
>>> On Wed, Jul 6, 2016 at 2:20 PM, Joseph Wu <jo...@mesosphere.io> wrote:
>>>
>>>> If you can see the WebUI via HTTP, without downgrade support, you might
>>>> be inadvertently running a different version of Mesos than the one you
>>>> built.
>>>>
>>>> You can quickly sanity check this by removing either SSL_KEY_FILE or
>>>> SSL_CERT_FILE and starting your master. If your build has SSL support, it
>>>> should immediately exit with an error message.
>>>>
>>>>
>>>> On Wed, Jul 6, 2016 at 12:33 PM, Douglas Nelson <it...@gmail.com>
>>>> wrote:
>>>> >
>>>> > I attempted to set up SSL following this guide:
>>>> http://mesos.apache.org/documentation/latest/ssl/
>>>> >
>>>> > I'm able to hit the WebUI with http but using https gives me nothing.
>>>> I must be missing something. Here are the steps I'm taking:
>>>> >
>>>> > I downloaded 0.28.2 from here:
>>>> https://github.com/apache/mesos/releases
>>>> > I ran ./configure --enable-libevent --enable-ssl
>>>> > Then I ran make and make install
>>>> > I set the following environment variables:
>>>> >
>>>> > export SSL_ENABLED=1
>>>> > export SSL_SUPPORT_DOWNGRADE=0
>>>> > export SSL_KEY_FILE=<path>
>>>> > export SSL_CERT_FILE=<path>
>>>> >
>>>> > Finally, I ran ./bin/mesos-master.sh --ip=127.0.0.1
>>>> --work_dir=/var/lib/mesos
>>>> >
>>>> > I can provide any additional information if needed. Thanks!
>>>> >
>>>> > Also, I read that SSL would be included in mesosphere's nightly
>>>> builds: https://open.mesosphere.com/downloads/mesos-nightly/
>>>> >
>>>> > How stable are those builds and has SSL already been included?
>>>> >
>>>> > -Doug Nelson
>>>>
>>>>
>>>
>>
>
Re: Setting up SSL for mesos
Posted by Douglas Nelson <it...@gmail.com>.
ldd src/.libs/mesos-master | grep ssl returns:
libevent_openssl-2.0.so.5 =>
/usr/lib/x86_64-linux-gnu/libevent_openssl-2.0.so.5
libssl.so.1.0.0 => /lib/x86_64-linux-gnu/libssl.so.1.0.0
So I am missing the libssl3.so line. Is that another package I need to
install as a prerequisite? In case it's relevant, I'm running ubuntu.
On Thu, Jul 7, 2016 at 1:14 PM, Joseph Wu <jo...@mesosphere.io> wrote:
> Can you double-check if your master is linking to openssl?
>
> From your build folder, you should get something like:
> ldd src/.libs/mesos-master | grep ssl
> libevent_openssl-2.0.so.5 => /lib64/libevent_openssl-2.0.so.5
> libssl.so.10 => /lib64/libssl.so.10
> libssl3.so => /lib64/libssl3.so
>
> There doesn't seem to be anything wrong with your configure/build steps.
> And your environment variables setup should work on any sane Unix shell.
> (Perhaps inline the environment variable? SSL_ENABLED=true
> ./mesos-master.sh ...)
>
> On Thu, Jul 7, 2016 at 11:53 AM, Douglas Nelson <it...@gmail.com>
> wrote:
>
>> I rebuilt from scratch with SSL support and got no errors. I only set *export
>> SSL_ENABLED=true* and then I ran the mesos-master.
>>
>> No errors were thrown and I can see the web UI via HTTP. I double checked
>> that I was running the .sh from the build folder I created. Is mesos not
>> connecting with the environment variable I set for some reason?
>>
>>
>>
>> On Wed, Jul 6, 2016 at 2:20 PM, Joseph Wu <jo...@mesosphere.io> wrote:
>>
>>> If you can see the WebUI via HTTP, without downgrade support, you might
>>> be inadvertently running a different version of Mesos than the one you
>>> built.
>>>
>>> You can quickly sanity check this by removing either SSL_KEY_FILE or
>>> SSL_CERT_FILE and starting your master. If your build has SSL support, it
>>> should immediately exit with an error message.
>>>
>>>
>>> On Wed, Jul 6, 2016 at 12:33 PM, Douglas Nelson <it...@gmail.com>
>>> wrote:
>>> >
>>> > I attempted to set up SSL following this guide:
>>> http://mesos.apache.org/documentation/latest/ssl/
>>> >
>>> > I'm able to hit the WebUI with http but using https gives me nothing.
>>> I must be missing something. Here are the steps I'm taking:
>>> >
>>> > I downloaded 0.28.2 from here:
>>> https://github.com/apache/mesos/releases
>>> > I ran ./configure --enable-libevent --enable-ssl
>>> > Then I ran make and make install
>>> > I set the following environment variables:
>>> >
>>> > export SSL_ENABLED=1
>>> > export SSL_SUPPORT_DOWNGRADE=0
>>> > export SSL_KEY_FILE=<path>
>>> > export SSL_CERT_FILE=<path>
>>> >
>>> > Finally, I ran ./bin/mesos-master.sh --ip=127.0.0.1
>>> --work_dir=/var/lib/mesos
>>> >
>>> > I can provide any additional information if needed. Thanks!
>>> >
>>> > Also, I read that SSL would be included in mesosphere's nightly
>>> builds: https://open.mesosphere.com/downloads/mesos-nightly/
>>> >
>>> > How stable are those builds and has SSL already been included?
>>> >
>>> > -Doug Nelson
>>>
>>>
>>
>
Re: Setting up SSL for mesos
Posted by Kamil Wokitajtis <wo...@gmail.com>.
You don't have to build it on every machine.
Just install checkinstall tool, build it on one machine and create package.
When building, after make command don't run make install, instead run:
checkinstall --install=no --pkgname=mesos --pkgversion=0.28.2 -y
I am using Ubuntu, so in my case it will create deb package.
Just copy it over to every node and do:
dpkg -i <package_name>
With this approach, it is very easy to update mesos to the most recent
version.
2016-07-08 1:56 GMT+02:00 Douglas Nelson <it...@gmail.com>:
> Inlining the environment variable fixed it! I had to use sudo to run
> mesos, so I either needed to inline it or use -E. *Facepalm*
>
> On the note of building mesos, is there any chance in the future that
> mesosphere would create a prebuilt mesos package with ssl included? It
> would be nice to avoid building on each machine I want to run mesos on.
> Also, it would be great to have the convenience of using config files,
> having automatic startup, etc with a simple apt-get install mesos-ssl. Is
> that something that's been considered?
>
> Thanks!
>
> On Thu, Jul 7, 2016 at 1:14 PM, Joseph Wu <jo...@mesosphere.io> wrote:
>
>> Can you double-check if your master is linking to openssl?
>>
>> From your build folder, you should get something like:
>> ldd src/.libs/mesos-master | grep ssl
>> libevent_openssl-2.0.so.5 => /lib64/libevent_openssl-2.0.so.5
>> libssl.so.10 => /lib64/libssl.so.10
>> libssl3.so => /lib64/libssl3.so
>>
>> There doesn't seem to be anything wrong with your configure/build steps.
>> And your environment variables setup should work on any sane Unix shell.
>> (Perhaps inline the environment variable? SSL_ENABLED=true
>> ./mesos-master.sh ...)
>>
>> On Thu, Jul 7, 2016 at 11:53 AM, Douglas Nelson <it...@gmail.com>
>> wrote:
>>
>>> I rebuilt from scratch with SSL support and got no errors. I only set *export
>>> SSL_ENABLED=true* and then I ran the mesos-master.
>>>
>>> No errors were thrown and I can see the web UI via HTTP. I double
>>> checked that I was running the .sh from the build folder I created. Is
>>> mesos not connecting with the environment variable I set for some reason?
>>>
>>>
>>>
>>> On Wed, Jul 6, 2016 at 2:20 PM, Joseph Wu <jo...@mesosphere.io> wrote:
>>>
>>>> If you can see the WebUI via HTTP, without downgrade support, you might
>>>> be inadvertently running a different version of Mesos than the one you
>>>> built.
>>>>
>>>> You can quickly sanity check this by removing either SSL_KEY_FILE or
>>>> SSL_CERT_FILE and starting your master. If your build has SSL support, it
>>>> should immediately exit with an error message.
>>>>
>>>>
>>>> On Wed, Jul 6, 2016 at 12:33 PM, Douglas Nelson <it...@gmail.com>
>>>> wrote:
>>>> >
>>>> > I attempted to set up SSL following this guide:
>>>> http://mesos.apache.org/documentation/latest/ssl/
>>>> >
>>>> > I'm able to hit the WebUI with http but using https gives me nothing.
>>>> I must be missing something. Here are the steps I'm taking:
>>>> >
>>>> > I downloaded 0.28.2 from here:
>>>> https://github.com/apache/mesos/releases
>>>> > I ran ./configure --enable-libevent --enable-ssl
>>>> > Then I ran make and make install
>>>> > I set the following environment variables:
>>>> >
>>>> > export SSL_ENABLED=1
>>>> > export SSL_SUPPORT_DOWNGRADE=0
>>>> > export SSL_KEY_FILE=<path>
>>>> > export SSL_CERT_FILE=<path>
>>>> >
>>>> > Finally, I ran ./bin/mesos-master.sh --ip=127.0.0.1
>>>> --work_dir=/var/lib/mesos
>>>> >
>>>> > I can provide any additional information if needed. Thanks!
>>>> >
>>>> > Also, I read that SSL would be included in mesosphere's nightly
>>>> builds: https://open.mesosphere.com/downloads/mesos-nightly/
>>>> >
>>>> > How stable are those builds and has SSL already been included?
>>>> >
>>>> > -Doug Nelson
>>>>
>>>>
>>>
>>
>
Re: Setting up SSL for mesos
Posted by Kapil Arya <ka...@mesosphere.io>.
Starting with Mesos 1.0.0 (including RCs and the recently nightly builds),
the binary rpm/deb packages published at repo.mesosphere.com are built with
SSL and module dependency installation (i.e. `./configure --enable-libevent
--enable-ssl --enable-install-module-dependencies`).
You can find the appropriate rpm/deb packages at:
* Stable: http://open.mesosphere.com/downloads/mesos/
* RC: http://open.mesosphere.com/downloads/mesos-rc/
* Nightly: http://open.mesosphere.com/downloads/mesos-nightly/
Best,
Kapil
On Fri, Jul 8, 2016 at 1:40 PM, Tim Harper <ti...@gmail.com> wrote:
> Id like to see it enabled. Or, a docker image to make it easy to build
> packages would be super cool too.
>
> Sent from my iPhone
>
> On Jul 7, 2016, at 17:56, Douglas Nelson <it...@gmail.com> wrote:
>
> Inlining the environment variable fixed it! I had to use sudo to run
> mesos, so I either needed to inline it or use -E. *Facepalm*
>
> On the note of building mesos, is there any chance in the future that
> mesosphere would create a prebuilt mesos package with ssl included? It
> would be nice to avoid building on each machine I want to run mesos on.
> Also, it would be great to have the convenience of using config files,
> having automatic startup, etc with a simple apt-get install mesos-ssl. Is
> that something that's been considered?
>
> Thanks!
>
> On Thu, Jul 7, 2016 at 1:14 PM, Joseph Wu <jo...@mesosphere.io> wrote:
>
>> Can you double-check if your master is linking to openssl?
>>
>> From your build folder, you should get something like:
>> ldd src/.libs/mesos-master | grep ssl
>> libevent_openssl-2.0.so.5 => /lib64/libevent_openssl-2.0.so.5
>> libssl.so.10 => /lib64/libssl.so.10
>> libssl3.so => /lib64/libssl3.so
>>
>> There doesn't seem to be anything wrong with your configure/build steps.
>> And your environment variables setup should work on any sane Unix shell.
>> (Perhaps inline the environment variable? SSL_ENABLED=true
>> ./mesos-master.sh ...)
>>
>> On Thu, Jul 7, 2016 at 11:53 AM, Douglas Nelson <it...@gmail.com>
>> wrote:
>>
>>> I rebuilt from scratch with SSL support and got no errors. I only set *export
>>> SSL_ENABLED=true* and then I ran the mesos-master.
>>>
>>> No errors were thrown and I can see the web UI via HTTP. I double
>>> checked that I was running the .sh from the build folder I created. Is
>>> mesos not connecting with the environment variable I set for some reason?
>>>
>>>
>>>
>>> On Wed, Jul 6, 2016 at 2:20 PM, Joseph Wu <jo...@mesosphere.io> wrote:
>>>
>>>> If you can see the WebUI via HTTP, without downgrade support, you might
>>>> be inadvertently running a different version of Mesos than the one you
>>>> built.
>>>>
>>>> You can quickly sanity check this by removing either SSL_KEY_FILE or
>>>> SSL_CERT_FILE and starting your master. If your build has SSL support, it
>>>> should immediately exit with an error message.
>>>>
>>>>
>>>> On Wed, Jul 6, 2016 at 12:33 PM, Douglas Nelson <it...@gmail.com>
>>>> wrote:
>>>> >
>>>> > I attempted to set up SSL following this guide:
>>>> http://mesos.apache.org/documentation/latest/ssl/
>>>> >
>>>> > I'm able to hit the WebUI with http but using https gives me nothing.
>>>> I must be missing something. Here are the steps I'm taking:
>>>> >
>>>> > I downloaded 0.28.2 from here:
>>>> https://github.com/apache/mesos/releases
>>>> > I ran ./configure --enable-libevent --enable-ssl
>>>> > Then I ran make and make install
>>>> > I set the following environment variables:
>>>> >
>>>> > export SSL_ENABLED=1
>>>> > export SSL_SUPPORT_DOWNGRADE=0
>>>> > export SSL_KEY_FILE=<path>
>>>> > export SSL_CERT_FILE=<path>
>>>> >
>>>> > Finally, I ran ./bin/mesos-master.sh --ip=127.0.0.1
>>>> --work_dir=/var/lib/mesos
>>>> >
>>>> > I can provide any additional information if needed. Thanks!
>>>> >
>>>> > Also, I read that SSL would be included in mesosphere's nightly
>>>> builds: https://open.mesosphere.com/downloads/mesos-nightly/
>>>> >
>>>> > How stable are those builds and has SSL already been included?
>>>> >
>>>> > -Doug Nelson
>>>>
>>>>
>>>
>>
>
Re: Setting up SSL for mesos
Posted by Tim Harper <ti...@gmail.com>.
Id like to see it enabled. Or, a docker image to make it easy to build packages would be super cool too.
Sent from my iPhone
> On Jul 7, 2016, at 17:56, Douglas Nelson <it...@gmail.com> wrote:
>
> Inlining the environment variable fixed it! I had to use sudo to run mesos, so I either needed to inline it or use -E. *Facepalm*
>
> On the note of building mesos, is there any chance in the future that mesosphere would create a prebuilt mesos package with ssl included? It would be nice to avoid building on each machine I want to run mesos on. Also, it would be great to have the convenience of using config files, having automatic startup, etc with a simple apt-get install mesos-ssl. Is that something that's been considered?
>
> Thanks!
>
> On Thu, Jul 7, 2016 at 1:14 PM, Joseph Wu <jo...@mesosphere.io> wrote:
>> Can you double-check if your master is linking to openssl?
>>
>> From your build folder, you should get something like:
>> ldd src/.libs/mesos-master | grep ssl
>> libevent_openssl-2.0.so.5 => /lib64/libevent_openssl-2.0.so.5
>> libssl.so.10 => /lib64/libssl.so.10
>> libssl3.so => /lib64/libssl3.so
>>
>> There doesn't seem to be anything wrong with your configure/build steps. And your environment variables setup should work on any sane Unix shell. (Perhaps inline the environment variable? SSL_ENABLED=true ./mesos-master.sh ...)
>>
>>> On Thu, Jul 7, 2016 at 11:53 AM, Douglas Nelson <it...@gmail.com> wrote:
>>> I rebuilt from scratch with SSL support and got no errors. I only set export SSL_ENABLED=true and then I ran the mesos-master.
>>>
>>> No errors were thrown and I can see the web UI via HTTP. I double checked that I was running the .sh from the build folder I created. Is mesos not connecting with the environment variable I set for some reason?
>>>
>>>
>>>
>>>> On Wed, Jul 6, 2016 at 2:20 PM, Joseph Wu <jo...@mesosphere.io> wrote:
>>>> If you can see the WebUI via HTTP, without downgrade support, you might be inadvertently running a different version of Mesos than the one you built.
>>>>
>>>> You can quickly sanity check this by removing either SSL_KEY_FILE or SSL_CERT_FILE and starting your master. If your build has SSL support, it should immediately exit with an error message.
>>>>
>>>>
>>>> On Wed, Jul 6, 2016 at 12:33 PM, Douglas Nelson <it...@gmail.com> wrote:
>>>> >
>>>> > I attempted to set up SSL following this guide: http://mesos.apache.org/documentation/latest/ssl/
>>>> >
>>>> > I'm able to hit the WebUI with http but using https gives me nothing. I must be missing something. Here are the steps I'm taking:
>>>> >
>>>> > I downloaded 0.28.2 from here: https://github.com/apache/mesos/releases
>>>> > I ran ./configure --enable-libevent --enable-ssl
>>>> > Then I ran make and make install
>>>> > I set the following environment variables:
>>>> >
>>>> > export SSL_ENABLED=1
>>>> > export SSL_SUPPORT_DOWNGRADE=0
>>>> > export SSL_KEY_FILE=<path>
>>>> > export SSL_CERT_FILE=<path>
>>>> >
>>>> > Finally, I ran ./bin/mesos-master.sh --ip=127.0.0.1 --work_dir=/var/lib/mesos
>>>> >
>>>> > I can provide any additional information if needed. Thanks!
>>>> >
>>>> > Also, I read that SSL would be included in mesosphere's nightly builds: https://open.mesosphere.com/downloads/mesos-nightly/
>>>> >
>>>> > How stable are those builds and has SSL already been included?
>>>> >
>>>> > -Doug Nelson
>
Re: Setting up SSL for mesos
Posted by Douglas Nelson <it...@gmail.com>.
Inlining the environment variable fixed it! I had to use sudo to run mesos,
so I either needed to inline it or use -E. *Facepalm*
On the note of building mesos, is there any chance in the future that
mesosphere would create a prebuilt mesos package with ssl included? It
would be nice to avoid building on each machine I want to run mesos on.
Also, it would be great to have the convenience of using config files,
having automatic startup, etc with a simple apt-get install mesos-ssl. Is
that something that's been considered?
Thanks!
On Thu, Jul 7, 2016 at 1:14 PM, Joseph Wu <jo...@mesosphere.io> wrote:
> Can you double-check if your master is linking to openssl?
>
> From your build folder, you should get something like:
> ldd src/.libs/mesos-master | grep ssl
> libevent_openssl-2.0.so.5 => /lib64/libevent_openssl-2.0.so.5
> libssl.so.10 => /lib64/libssl.so.10
> libssl3.so => /lib64/libssl3.so
>
> There doesn't seem to be anything wrong with your configure/build steps.
> And your environment variables setup should work on any sane Unix shell.
> (Perhaps inline the environment variable? SSL_ENABLED=true
> ./mesos-master.sh ...)
>
> On Thu, Jul 7, 2016 at 11:53 AM, Douglas Nelson <it...@gmail.com>
> wrote:
>
>> I rebuilt from scratch with SSL support and got no errors. I only set *export
>> SSL_ENABLED=true* and then I ran the mesos-master.
>>
>> No errors were thrown and I can see the web UI via HTTP. I double checked
>> that I was running the .sh from the build folder I created. Is mesos not
>> connecting with the environment variable I set for some reason?
>>
>>
>>
>> On Wed, Jul 6, 2016 at 2:20 PM, Joseph Wu <jo...@mesosphere.io> wrote:
>>
>>> If you can see the WebUI via HTTP, without downgrade support, you might
>>> be inadvertently running a different version of Mesos than the one you
>>> built.
>>>
>>> You can quickly sanity check this by removing either SSL_KEY_FILE or
>>> SSL_CERT_FILE and starting your master. If your build has SSL support, it
>>> should immediately exit with an error message.
>>>
>>>
>>> On Wed, Jul 6, 2016 at 12:33 PM, Douglas Nelson <it...@gmail.com>
>>> wrote:
>>> >
>>> > I attempted to set up SSL following this guide:
>>> http://mesos.apache.org/documentation/latest/ssl/
>>> >
>>> > I'm able to hit the WebUI with http but using https gives me nothing.
>>> I must be missing something. Here are the steps I'm taking:
>>> >
>>> > I downloaded 0.28.2 from here:
>>> https://github.com/apache/mesos/releases
>>> > I ran ./configure --enable-libevent --enable-ssl
>>> > Then I ran make and make install
>>> > I set the following environment variables:
>>> >
>>> > export SSL_ENABLED=1
>>> > export SSL_SUPPORT_DOWNGRADE=0
>>> > export SSL_KEY_FILE=<path>
>>> > export SSL_CERT_FILE=<path>
>>> >
>>> > Finally, I ran ./bin/mesos-master.sh --ip=127.0.0.1
>>> --work_dir=/var/lib/mesos
>>> >
>>> > I can provide any additional information if needed. Thanks!
>>> >
>>> > Also, I read that SSL would be included in mesosphere's nightly
>>> builds: https://open.mesosphere.com/downloads/mesos-nightly/
>>> >
>>> > How stable are those builds and has SSL already been included?
>>> >
>>> > -Doug Nelson
>>>
>>>
>>
>
Re: Setting up SSL for mesos
Posted by Joseph Wu <jo...@mesosphere.io>.
Can you double-check if your master is linking to openssl?
From your build folder, you should get something like:
ldd src/.libs/mesos-master | grep ssl
libevent_openssl-2.0.so.5 => /lib64/libevent_openssl-2.0.so.5
libssl.so.10 => /lib64/libssl.so.10
libssl3.so => /lib64/libssl3.so
There doesn't seem to be anything wrong with your configure/build steps.
And your environment variables setup should work on any sane Unix shell.
(Perhaps inline the environment variable? SSL_ENABLED=true
./mesos-master.sh ...)
On Thu, Jul 7, 2016 at 11:53 AM, Douglas Nelson <it...@gmail.com> wrote:
> I rebuilt from scratch with SSL support and got no errors. I only set *export
> SSL_ENABLED=true* and then I ran the mesos-master.
>
> No errors were thrown and I can see the web UI via HTTP. I double checked
> that I was running the .sh from the build folder I created. Is mesos not
> connecting with the environment variable I set for some reason?
>
>
>
> On Wed, Jul 6, 2016 at 2:20 PM, Joseph Wu <jo...@mesosphere.io> wrote:
>
>> If you can see the WebUI via HTTP, without downgrade support, you might
>> be inadvertently running a different version of Mesos than the one you
>> built.
>>
>> You can quickly sanity check this by removing either SSL_KEY_FILE or
>> SSL_CERT_FILE and starting your master. If your build has SSL support, it
>> should immediately exit with an error message.
>>
>>
>> On Wed, Jul 6, 2016 at 12:33 PM, Douglas Nelson <it...@gmail.com>
>> wrote:
>> >
>> > I attempted to set up SSL following this guide:
>> http://mesos.apache.org/documentation/latest/ssl/
>> >
>> > I'm able to hit the WebUI with http but using https gives me nothing. I
>> must be missing something. Here are the steps I'm taking:
>> >
>> > I downloaded 0.28.2 from here: https://github.com/apache/mesos/releases
>> > I ran ./configure --enable-libevent --enable-ssl
>> > Then I ran make and make install
>> > I set the following environment variables:
>> >
>> > export SSL_ENABLED=1
>> > export SSL_SUPPORT_DOWNGRADE=0
>> > export SSL_KEY_FILE=<path>
>> > export SSL_CERT_FILE=<path>
>> >
>> > Finally, I ran ./bin/mesos-master.sh --ip=127.0.0.1
>> --work_dir=/var/lib/mesos
>> >
>> > I can provide any additional information if needed. Thanks!
>> >
>> > Also, I read that SSL would be included in mesosphere's nightly builds:
>> https://open.mesosphere.com/downloads/mesos-nightly/
>> >
>> > How stable are those builds and has SSL already been included?
>> >
>> > -Doug Nelson
>>
>>
>
Re: Setting up SSL for mesos
Posted by Douglas Nelson <it...@gmail.com>.
I rebuilt from scratch with SSL support and got no errors. I only set *export
SSL_ENABLED=true* and then I ran the mesos-master.
No errors were thrown and I can see the web UI via HTTP. I double checked
that I was running the .sh from the build folder I created. Is mesos not
connecting with the environment variable I set for some reason?
On Wed, Jul 6, 2016 at 2:20 PM, Joseph Wu <jo...@mesosphere.io> wrote:
> If you can see the WebUI via HTTP, without downgrade support, you might be
> inadvertently running a different version of Mesos than the one you built.
>
> You can quickly sanity check this by removing either SSL_KEY_FILE or
> SSL_CERT_FILE and starting your master. If your build has SSL support, it
> should immediately exit with an error message.
>
>
> On Wed, Jul 6, 2016 at 12:33 PM, Douglas Nelson <it...@gmail.com>
> wrote:
> >
> > I attempted to set up SSL following this guide:
> http://mesos.apache.org/documentation/latest/ssl/
> >
> > I'm able to hit the WebUI with http but using https gives me nothing. I
> must be missing something. Here are the steps I'm taking:
> >
> > I downloaded 0.28.2 from here: https://github.com/apache/mesos/releases
> > I ran ./configure --enable-libevent --enable-ssl
> > Then I ran make and make install
> > I set the following environment variables:
> >
> > export SSL_ENABLED=1
> > export SSL_SUPPORT_DOWNGRADE=0
> > export SSL_KEY_FILE=<path>
> > export SSL_CERT_FILE=<path>
> >
> > Finally, I ran ./bin/mesos-master.sh --ip=127.0.0.1
> --work_dir=/var/lib/mesos
> >
> > I can provide any additional information if needed. Thanks!
> >
> > Also, I read that SSL would be included in mesosphere's nightly builds:
> https://open.mesosphere.com/downloads/mesos-nightly/
> >
> > How stable are those builds and has SSL already been included?
> >
> > -Doug Nelson
>
>
Re: Setting up SSL for mesos
Posted by Joseph Wu <jo...@mesosphere.io>.
If you can see the WebUI via HTTP, without downgrade support, you might be
inadvertently running a different version of Mesos than the one you built.
You can quickly sanity check this by removing either SSL_KEY_FILE or
SSL_CERT_FILE and starting your master. If your build has SSL support, it
should immediately exit with an error message.
On Wed, Jul 6, 2016 at 12:33 PM, Douglas Nelson <it...@gmail.com> wrote:
>
> I attempted to set up SSL following this guide:
http://mesos.apache.org/documentation/latest/ssl/
>
> I'm able to hit the WebUI with http but using https gives me nothing. I
must be missing something. Here are the steps I'm taking:
>
> I downloaded 0.28.2 from here: https://github.com/apache/mesos/releases
> I ran ./configure --enable-libevent --enable-ssl
> Then I ran make and make install
> I set the following environment variables:
>
> export SSL_ENABLED=1
> export SSL_SUPPORT_DOWNGRADE=0
> export SSL_KEY_FILE=<path>
> export SSL_CERT_FILE=<path>
>
> Finally, I ran ./bin/mesos-master.sh --ip=127.0.0.1
--work_dir=/var/lib/mesos
>
> I can provide any additional information if needed. Thanks!
>
> Also, I read that SSL would be included in mesosphere's nightly builds:
https://open.mesosphere.com/downloads/mesos-nightly/
>
> How stable are those builds and has SSL already been included?
>
> -Doug Nelson