[ 
https://issues.apache.org/jira/browse/CASSANDRA-10404?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16216710#comment-16216710
 ] 

Jason Brown commented on CASSANDRA-10404:
-----------------------------------------

I've pushed a few commits to the branch, and utests running:

||10404||
|[branch|https://github.com/jasobrown/cassandra/tree/10404]|
|[dtest-code|https://github.com/jasobrown/cassandra-dtest/tree/10404-dtest]|
|[ccm-code|https://github.com/jasobrown/ccm/tree/10404]|
|[utests|https://circleci.com/gh/jasobrown/cassandra/tree/10404]|

The ccm patch from earlier is still required for commit, and the dtest branch 
has one additional commit (to support the new yaml 
{{enable_legacy_ssl_storage_port}}). The latest branch commits address the 
issues the issues pointed out thus far, except for documentation. I've also 
added a bunch of tests for {{MessagingService#listen}} in 
{{MessagingServiceTests}} to make sure we actaully open all the correct 
sockets/ports.

bq. fallback to SystemKeyspace.getReleaseVersion(ep)
This seems reasonable, but it gets really messy fast. 
{{SystemKeyspace.getReleaseVersion}} returns a {{CassandraVersion}}, which has 
no direct mapping of which messaging protocol version was used with that 
cassandra version. This is made harder due to the 3.0/3.0.14 messaging version, 
further complicated by 3.11, further complicated in that we allowed explicitly 
setting the version via {{cassandra.force_3_0_protocol_version}} 
(CASSANDRA-13004). I started to implement this, but it felt really unstable. 


> Node to Node encryption transitional mode
> -----------------------------------------
>
>                 Key: CASSANDRA-10404
>                 URL: https://issues.apache.org/jira/browse/CASSANDRA-10404
>             Project: Cassandra
>          Issue Type: New Feature
>            Reporter: Tom Lewis
>            Assignee: Jason Brown
>             Fix For: 4.x
>
>
> Create a transitional mode for encryption that allows encrypted and 
> unencrypted traffic node-to-node during a change over to encryption from 
> unencrypted. This alleviates downtime during the switch.
>  This is similar to CASSANDRA-10559 which is intended for client-to-node



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to