Mailing-List: contact commits-help@cassandra.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@cassandra.apache.org
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
From: Apache Wiki <wikidiffs@apache.org>
To: Apache Wiki <wikidiffs@apache.org>
Date: Fri, 11 Nov 2011 20:23:22 -0000
Message-ID: <20111111202322.21442.37036@eos.apache.org>
Subject: 
 =?utf-8?q?=5BCassandra_Wiki=5D_Update_of_=22InternodeEncryption=22_by_Dav?=
 =?utf-8?q?idAllsopp?=
Auto-Submitted: auto-generated

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Cassandra Wiki" for=
 change notification.

The "InternodeEncryption" page has been changed by DavidAllsopp:
http://wiki.apache.org/cassandra/InternodeEncryption

New page:
Inter-node encryption uses standard TLS/SSL to authenticate and encrypt mes=
sages between nodes, to preotect data in transit between nodes, and to prev=
ent unauthorized access to/control of nodes.

Encryption can be applied to all inter-node messages, or just messages cros=
sing from one Datacenter to another.

This page needs fleshing out... skeleton instructions from https://issues.a=
pache.org/jira/browse/CASSANDRA-3051 are:

 1. follow the steps for generating a keystore and a trust store here: http=
://download.oracle.com/javase/6/docs/technotes/guides/security/jsse/JSSERef=
Guide.html#CreateKeystore
 2. plug those files into encryption_options in cassandra.yaml
 3. make sure encryption_options.internode_encryption =3D all in the yaml.

----

See also SimpleAuthenticator for details of the authentication of Thrift cl=
ients (rather than between nodes).