Return-Path: X-Original-To: apmail-cassandra-commits-archive@www.apache.org Delivered-To: apmail-cassandra-commits-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 91DD817F8D for ; Sun, 1 Feb 2015 06:46:34 +0000 (UTC) Received: (qmail 14258 invoked by uid 500); 1 Feb 2015 06:46:35 -0000 Delivered-To: apmail-cassandra-commits-archive@cassandra.apache.org Received: (qmail 14213 invoked by uid 500); 1 Feb 2015 06:46:35 -0000 Mailing-List: contact commits-help@cassandra.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@cassandra.apache.org Delivered-To: mailing list commits@cassandra.apache.org Received: (qmail 14201 invoked by uid 99); 1 Feb 2015 06:46:35 -0000 Received: from arcas.apache.org (HELO arcas.apache.org) (140.211.11.28) by apache.org (qpsmtpd/0.29) with ESMTP; Sun, 01 Feb 2015 06:46:35 +0000 Date: Sun, 1 Feb 2015 06:46:35 +0000 (UTC) From: "Philip Thompson (JIRA)" To: commits@cassandra.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Updated] (CASSANDRA-8711) cassandra 2.1.2 ssl client encryption not working MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/CASSANDRA-8711?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Philip Thompson updated CASSANDRA-8711: --------------------------------------- Reproduced In: 2.1.2 Fix Version/s: 2.1.3 > cassandra 2.1.2 ssl client encryption not working > -------------------------------------------------- > > Key: CASSANDRA-8711 > URL: https://issues.apache.org/jira/browse/CASSANDRA-8711 > Project: Cassandra > Issue Type: Bug > Reporter: Jeff Liu > Fix For: 2.1.3 > > > I have been trying to setup client encryption on a three nodes 2.1.2 version cassandra cluster and keep getting the following error: > {noformat} > Connection error: ('Unable to connect to any servers', {'localhost': ConnectionShutdown('Connection is already closed',)}) > {noformat} > I tried with both cqlsh and datatax python cassandra-driver and no luck to login. > I created /rooot/.cassandra/cqlshrc file for cqlsh settings, the content is: > {noformat} > [authentication] > username = > password = > [connection] > hostname = localhost > port = 9160 > factory = cqlshlib.ssl.ssl_transport_factory > [ssl] > certfile = /root/.cassandra/localhost_user1.pem > validate = false ## Optional, true by default > {noformat} > my cassandra.yaml configuration related to client_encryptions: > {noformat} > client_encryption_options: > enabled: True > keystore: /etc/cassandra/conf/.keystore > keystore_password: cassnest > {noformat} > the keystore, truststore, cert/pem (localhost_user1.pem) key have been verified to be working fine for datastax enterprise version. -- This message was sent by Atlassian JIRA (v6.3.4#6332)