[
https://issues.apache.org/jira/browse/CASSANDRA-8711?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14305716#comment-14305716
]
Jeff Liu commented on CASSANDRA-8711:
-------------------------------------
After spending a little more time, I wrote some quick ruby code to test client
encryption/authentication and managed to get it working!
I think my problem was really the cqlsh not able to connect to cassandra nodes
with client encryption or authentication or both enabled.
here is my cqlshrc file contents:
{noformat}
[authentication]
username = cassandra
password = cassandra
[connection]
hostname = localhost
port = 9160
factory = cqlshlib.ssl.ssl_transport_factory
[ssl]
certfile = /root/.cassandra/private1.pem
validate = false ## Optional, true by default
{noformat}
the private1.pem is the private key that I was able to connect from client
(ruby script) with.
> cassandra 2.1.2 ssl client encryption not working
> --------------------------------------------------
>
> Key: CASSANDRA-8711
> URL: https://issues.apache.org/jira/browse/CASSANDRA-8711
> Project: Cassandra
> Issue Type: Bug
> Reporter: Jeff Liu
> Fix For: 2.1.3
>
>
> I have been trying to setup client encryption on a three nodes 2.1.2 version
> cassandra cluster and keep getting the following error:
> {noformat}
> Connection error: ('Unable to connect to any servers', {'localhost':
> ConnectionShutdown('Connection <AsyncoreConnection(44536208) localhost:9160
> (closed)> is already closed',)})
> {noformat}
> I tried with both cqlsh and datatax python cassandra-driver and no luck to
> login.
> I created /rooot/.cassandra/cqlshrc file for cqlsh settings, the content is:
> {noformat}
> [authentication]
> username =
> password =
> [connection]
> hostname = localhost
> port = 9160
> factory = cqlshlib.ssl.ssl_transport_factory
> [ssl]
> certfile = /root/.cassandra/localhost_user1.pem
> validate = false ## Optional, true by default
> {noformat}
> my cassandra.yaml configuration related to client_encryptions:
> {noformat}
> client_encryption_options:
> enabled: True
> keystore: /etc/cassandra/conf/.keystore
> keystore_password: cassnest
> {noformat}
> the keystore, truststore, cert/pem (localhost_user1.pem) key have been
> verified to be working fine for datastax enterprise version.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
