'sslv3 alert handshake failure' when running doorman on docker

[alexpacio]

If I build a doorman container leveraging on your Dockerfile and I try to connect osqueryd to that doorman instance, I get this errors:

tls_enroll.cpp:75] Failed enrollment request to https://doorman:5000/enroll (Request error: sslv3 alert handshake failure) retrying...

This is the full log:
device_output.txt

Instead, if I try to run doorman in my host system, it does work flawlessly.

FYI, in my host system i'm using Fedora 25 x64.

[maximcherny]

The gunicorn launch arggs in docker/service/api/run seem to also expect:

...
    --keyfile ./private.key \
    --certfile ./certificate.crt \
...

Assuming these have been provided (or self-generated), the container runs fine upon a rebuild.

Alternatively, one would need to tweak the app code / config to disable https redirection for testing purposes, need a better way of handling this for production.

[maximcherny]

And then it also expects the Postgres DB to be fully migrated, so one could fix that by issuing the following command in the container:

cd /src
export DOORMAN_SETTINGS=$PWD/settings.cfg && python manage.py db upgrade

But it should really be part of the service run definition imho.