[prev in list] [next in list] [prev in thread] [next in thread] 

List:       mesos-user
Subject:    Re: Using TLS in Mesos 1.9
From:       Ajay V <ajayveee () gmail ! com>
Date:       2021-12-07 4:43:47
Message-ID: CANLR=kNKncsmrPDaOziLFXS787G+JqovoWsxZBdGrJetB4bMhA () mail ! gmail ! com
[Download RAW message or body]

Thank you for the response Charles. Password protected key files are
supported. When running the startup scripts, the stdin prompts for the key
password. This, is however not very friendly.
I was wondering if there was an option to supply it from a file or some
other nicer alternatives.

Worst case, I plan to use the decrypted method you pointed out.

Regards,
Ajay

On Fri, Dec 3, 2021 at 12:51 AM Charles-François Natali <cf.natali@gmail.com>
wrote:

> Hi Ajay,
>
> I haven't used TLS much with Mesos but I don't think password
> protected key files are supported - I'm not sure how useful that would
> be in practice anyway.
> I think your best bet is to decrypt it using e.g. openssl and provide
> that decrypted key file instead.
>
> Cheers,
>
> Charles
>
>
>
>
> Le mer. 1 déc. 2021 à 04:51, Ajay V <ajayveee@gmail.com> a écrit :
> >
> > Hi Mesos user group,
> >
> > I was experimenting with TLS in mesos and was wondering what is the best
> way the key password is supplied when starting master and agents. I see
> there are environment variables to supply the key file
> (LIBPROCESS_SSL_KEY_FILE) but could not find a variable to supply the
> password.
> >
> > When scripting the start scripts, is there a way to provide this
> password from a file or are there other options?
> >
> > Regards,
> > Ajay
>
-- 
Regards,
Ajay

[Attachment #3 (text/html)]

<div dir="auto">Thank you for the response Charles. Password protected key files are \
supported. When running the startup scripts, the stdin prompts for the key password. \
This, is however not very friendly.  </div><div dir="auto">I was wondering if there \
was an option to supply it from a file or some other nicer alternatives.</div><div \
dir="auto"><br></div><div dir="auto">Worst case, I plan to use the decrypted method \
you pointed out.</div><div dir="auto"><br></div><div dir="auto">Regards,</div><div \
dir="auto">Ajay</div><div dir="auto"><br></div><div><div class="gmail_quote"><div \
dir="ltr" class="gmail_attr">On Fri, Dec 3, 2021 at 12:51 AM Charles-François Natali \
&lt;<a href="mailto:cf.natali@gmail.com">cf.natali@gmail.com</a>&gt; \
wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 \
.8ex;border-left:1px #ccc solid;padding-left:1ex">Hi Ajay,<br> <br>
I haven&#39;t used TLS much with Mesos but I don&#39;t think password<br>
protected key files are supported - I&#39;m not sure how useful that would<br>
be in practice anyway.<br>
I think your best bet is to decrypt it using e.g. openssl and provide<br>
that decrypted key file instead.<br>
<br>
Cheers,<br>
<br>
Charles<br>
<br>
<br>
<br>
<br>
Le mer. 1 déc. 2021 à 04:51, Ajay V &lt;<a href="mailto:ajayveee@gmail.com" \
target="_blank">ajayveee@gmail.com</a>&gt; a écrit :<br> &gt;<br>
&gt; Hi Mesos user group,<br>
&gt;<br>
&gt; I was experimenting with TLS in mesos and was wondering what is the best way the \
key password is supplied when starting master and agents. I see there are environment \
variables to supply the key file (LIBPROCESS_SSL_KEY_FILE) but could not find a \
variable to supply the password.<br> &gt;<br>
&gt; When scripting the start scripts, is there a way to provide this password from a \
file or are there other options?<br> &gt;<br>
&gt; Regards,<br>
&gt; Ajay<br>
</blockquote></div></div>-- <br><div dir="ltr" class="gmail_signature" \
data-smartmail="gmail_signature">Regards,<br>Ajay</div>



[prev in list] [next in list] [prev in thread] [next in thread]