Mailing-List: contact commits-help@cassandra.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@cassandra.apache.org
Date: Mon, 29 Aug 2011 15:58:40 +0000 (UTC)
From: "Gary Dusbabek (JIRA)" <jira@apache.org>
To: commits@cassandra.apache.org
Message-ID: 
 <1963953116.3589.1314633520380.JavaMail.tomcat@hel.zones.apache.org>
In-Reply-To: 
 <1909537818.46861.1313618847170.JavaMail.tomcat@hel.zones.apache.org>
Subject: [jira] [Commented] (CASSANDRA-3051) On Disk Compression breaks SSL
 Encryption
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit


    [ https://issues.apache.org/jira/browse/CASSANDRA-3051?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13092930#comment-13092930 ] 

Gary Dusbabek commented on CASSANDRA-3051:
------------------------------------------

Not that I know of.  If someone wants to write one it would flesh out these basic steps:
# follow the steps for generating a keystore and a trust store here: http://download.oracle.com/javase/6/docs/technotes/guides/security/jsse/JSSERefGuide.html#CreateKeystore
# plug those files into encryption_options in cassandra.yaml
# make sure encryption_options.internode_encryption = all in the yaml.

I was mostly raising a voice of caution against committing code backed up by statements like "I don't see anh reason why it won't..."  This is usually a prelude to something like "we need to quickly release a new version because XYZ broke streaming."  Just sayin'.

> On Disk Compression breaks SSL Encryption
> -----------------------------------------
>
>                 Key: CASSANDRA-3051
>                 URL: https://issues.apache.org/jira/browse/CASSANDRA-3051
>             Project: Cassandra
>          Issue Type: Bug
>    Affects Versions: 1.0
>         Environment: Trunk
>            Reporter: Benjamin Coverston
>            Assignee: Pavel Yaskevich
>             Fix For: 1.0
>
>         Attachments: CASSANDRA-3051.patch
>
>
> Encryption depends on FileStreamTask.write [1] protected member to be called because the SSLFileStreamTask.write overrides this to write back to the server.
> When enabled, compression circumvents the call and the client does not communicate using an SSL socket back to the server.
> [1]
> protected long write(FileChannel fc, Pair<Long, Long> section, long length, long bytesTransferred) throws IOException

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira