Dinesh Joshi created CASSANDRA-14991:
----------------------------------------
Summary: SSL Cert Hot Reloading should check for sanity of the new
keystore/truststore before loading it
Key: CASSANDRA-14991
URL: https://issues.apache.org/jira/browse/CASSANDRA-14991
Project: Cassandra
Issue Type: Bug
Components: Feature/Encryption
Reporter: Dinesh Joshi
Assignee: Dinesh Joshi
SSL Cert Hot Reloading assumes that the keystore & truststore are valid.
However, a corrupt store or a password mismatch can cause Cassandra to fail
accepting new connections as we throw away the old {{SslContext}}. This patch
will ensure that we check the sanity of the certificates during startup and
during hot reloading. This should protect against bad key/trust stores.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
