Return-Path: X-Original-To: apmail-cassandra-commits-archive@www.apache.org Delivered-To: apmail-cassandra-commits-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 1F2F5176E8 for ; Wed, 24 Jun 2015 12:32:05 +0000 (UTC) Received: (qmail 32625 invoked by uid 500); 24 Jun 2015 12:32:05 -0000 Delivered-To: apmail-cassandra-commits-archive@cassandra.apache.org Received: (qmail 32587 invoked by uid 500); 24 Jun 2015 12:32:05 -0000 Mailing-List: contact commits-help@cassandra.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@cassandra.apache.org Delivered-To: mailing list commits@cassandra.apache.org Received: (qmail 32576 invoked by uid 99); 24 Jun 2015 12:32:04 -0000 Received: from arcas.apache.org (HELO arcas.apache.org) (140.211.11.28) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 24 Jun 2015 12:32:04 +0000 Date: Wed, 24 Jun 2015 12:32:04 +0000 (UTC) From: "Marcus Olsson (JIRA)" To: commits@cassandra.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Comment Edited] (CASSANDRA-9090) Allow JMX over SSL directly from nodetool MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/CASSANDRA-9090?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14599328#comment-14599328 ] Marcus Olsson edited comment on CASSANDRA-9090 at 6/24/15 12:31 PM: -------------------------------------------------------------------- This patch makes it possible to use SSL with nodetool by running it with: {noformat} nodetool --ssl {noformat} Then either using a configuration file in ~/.cassandra/ called nodetool.properties {code:title=nodetool.properties} # Path to keystore keyStore=/path/to/keystore # Keystore password keyStorePassword= # Path to truststore trustStore=/path/to/truststore # Truststore password trustStorePassword= # Enabled cipher suites cipherSuites= # Enabled protocols enabledProtocols= {code} or by running it with the flags: {noformat} nodetool --ssl -Djavax.net.ssl.keyStore=/path/to/keystore -Djavax.net.ssl.keyStorePassword= -Djavax.net.ssl.trustStore=/path/to/truststore -Djavax.net.ssl.trustStorePassword= -Djavax.rmi.ssl.client.enabledCipherSuites= -Djavax.rmi.ssl.client.enabledProtocols= {noformat} Edit: This patch is only tested on 2.1. was (Author: molsson): This patch makes it possible to use SSL with nodetool by running it with: {noformat} nodetool --ssl {noformat} Then either using a configuration file in ~/.cassandra/ called nodetool.properties {code:title=nodetool.properties} # Path to keystore keyStore=/path/to/keystore # Keystore password keyStorePassword= # Path to truststore trustStore=/path/to/truststore # Truststore password trustStorePassword= # Enabled cipher suites cipherSuites= # Enabled protocols enabledProtocols= {code} or by running it with the flags: {noformat} nodetool --ssl -Djavax.net.ssl.keyStore=/path/to/keystore -Djavax.net.ssl.keyStorePassword= -Djavax.net.ssl.trustStore=/path/to/truststore -Djavax.net.ssl.trustStorePassword= -Djavax.rmi.ssl.client.enabledCipherSuites= -Djavax.rmi.ssl.client.enabledProtocols= {noformat} > Allow JMX over SSL directly from nodetool > ----------------------------------------- > > Key: CASSANDRA-9090 > URL: https://issues.apache.org/jira/browse/CASSANDRA-9090 > Project: Cassandra > Issue Type: Improvement > Components: Tools > Reporter: Philip Thompson > Fix For: 3.x, 2.1.x, 2.0.x > > Attachments: cassandra-2.1-9090.patch > > > Currently cqlsh allows users to connect via SSL to their cassandra cluster via command line. > Nodetool only offers username/password authentication [1], and if users want to use SSL, they need to use jconsole [2]. We should support nodetool connecting via SSL in the same way cqlsh does. > [1] http://wiki.apache.org/cassandra/JmxSecurity > [2] https://www.lullabot.com/blog/article/monitor-java-jmx > [3] http://docs.oracle.com/javase/8/docs/technotes/guides/management/agent.html -- This message was sent by Atlassian JIRA (v6.3.4#6332)