You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@mesos.apache.org by Adam Cecile <ad...@hitec.lu> on 2017/03/28 07:23:57 UTC
SSL certificate error (1.1.0 OK, 1.1.1 NOK: Error downloading
resource: Problem with the SSL CA cert (path? access rights?))
Hello,
Here is a simple test showing why I cannot upgrade Mesos anymore (Debian
Jessie, using mesosphere packages):
apt-get install mesos=1.1.0-2.0.107.debian81
MESOS_FETCHER_INFO='{ "sandbox_directory": "/tmp/abc", "items": [ {
"uri": { "value": "https://path/to/file }, "action": "BYPASS_CACHE" } ]
}' /usr/libexec/mesos/mesos-fetcher
[...] 0328 09:20:39.361690 129351 fetcher.cpp:547] Fetched
'https://path/to/file' to '/tmp/abc/file'
apt-get install mesos=1.1.1-2.0.1
MESOS_FETCHER_INFO='{ "sandbox_directory": "/tmp/abc", "items": [ {
"uri": { "value": "https://path/to/file }, "action": "BYPASS_CACHE" } ]
}' /usr/libexec/mesos/mesos-fetcher
[...] Failed to fetch 'https://path/to/file': Error downloading
resource: Problem with the SSL CA cert (path? access rights?)
Obviously the URL is working just fine when being retreive with CURL,
WGET or a JAVA app from the server itself.
Any hint would be appreciated !
Best regards, Adam.
Re: SSL certificate error (1.1.0 OK, 1.1.1 NOK: Error downloading
resource: Problem with the SSL CA cert (path? access rights?))
Posted by Adam Cecile <ad...@hitec.lu>.
Hello,
Actually it's way more complicated:
It's related to the use of libcurl-nss: libnss does not support PEM
certificates so it cannot used any of the ones available on a regular
Debian system.
Moreover there's no good way to add this support so I did a dirty
workaround to fix this but I think you should really re-consider the use
of nss variant of libcurl...
More information here:
https://github.com/mesosphere/mesos-deb-packaging/pull/104
Adam.
On 03/28/2017 10:09 AM, Adam Bordelon wrote:
> I found https://issues.apache.org/jira/browse/MESOS-7133 but that was
> supposedly fixed in 1.1.1 (broken in 1.1.0)
>
> On Tue, Mar 28, 2017 at 12:23 AM, Adam Cecile <adam.cecile@hitec.lu
> <ma...@hitec.lu>> wrote:
>
> Hello,
>
>
> Here is a simple test showing why I cannot upgrade Mesos anymore
> (Debian Jessie, using mesosphere packages):
>
>
> apt-get install mesos=1.1.0-2.0.107.debian81
>
> MESOS_FETCHER_INFO='{ "sandbox_directory": "/tmp/abc", "items": [
> { "uri": { "value": "https://path/to/file }, "action":
> "BYPASS_CACHE" } ] }' /usr/libexec/mesos/mesos-fetcher
>
> [...] 0328 09:20:39.361690 129351 fetcher.cpp:547] Fetched
> 'https://path/to/file' to '/tmp/abc/file'
>
>
> apt-get install mesos=1.1.1-2.0.1
>
> MESOS_FETCHER_INFO='{ "sandbox_directory": "/tmp/abc", "items": [
> { "uri": { "value": "https://path/to/file }, "action":
> "BYPASS_CACHE" } ] }' /usr/libexec/mesos/mesos-fetcher
>
> [...] Failed to fetch 'https://path/to/file': Error downloading
> resource: Problem with the SSL CA cert (path? access rights?)
>
>
>
> Obviously the URL is working just fine when being retreive with
> CURL, WGET or a JAVA app from the server itself.
>
> Any hint would be appreciated !
>
>
> Best regards, Adam.
>
>
Re: SSL certificate error (1.1.0 OK, 1.1.1 NOK: Error downloading
resource: Problem with the SSL CA cert (path? access rights?))
Posted by Adam Bordelon <ad...@mesosphere.io>.
I found https://issues.apache.org/jira/browse/MESOS-7133 but that was
supposedly fixed in 1.1.1 (broken in 1.1.0)
On Tue, Mar 28, 2017 at 12:23 AM, Adam Cecile <ad...@hitec.lu> wrote:
> Hello,
>
>
> Here is a simple test showing why I cannot upgrade Mesos anymore (Debian
> Jessie, using mesosphere packages):
>
>
> apt-get install mesos=1.1.0-2.0.107.debian81
>
> MESOS_FETCHER_INFO='{ "sandbox_directory": "/tmp/abc", "items": [ { "uri":
> { "value": "https://path/to/file }, "action": "BYPASS_CACHE" } ] }'
> /usr/libexec/mesos/mesos-fetcher
>
> [...] 0328 09:20:39.361690 129351 fetcher.cpp:547] Fetched '
> https://path/to/file' to '/tmp/abc/file'
>
>
> apt-get install mesos=1.1.1-2.0.1
>
> MESOS_FETCHER_INFO='{ "sandbox_directory": "/tmp/abc", "items": [ { "uri":
> { "value": "https://path/to/file }, "action": "BYPASS_CACHE" } ] }'
> /usr/libexec/mesos/mesos-fetcher
>
> [...] Failed to fetch 'https://path/to/file': Error downloading resource:
> Problem with the SSL CA cert (path? access rights?)
>
>
>
> Obviously the URL is working just fine when being retreive with CURL, WGET
> or a JAVA app from the server itself.
>
> Any hint would be appreciated !
>
>
> Best regards, Adam.
>