-
Notifications
You must be signed in to change notification settings - Fork 30
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Unable to create SSL connection for Cassandra #618
Comments
This is an issue with how Cassandra is creating the KeyStore. It needs to be configured to use a JSS keystore, (or This isn't really a JSS problem; SunJSSE in FIPS mode would have the same requirements. We've wanted to work around this, but would require hacks around NSS features, which I wouldn't do in a wrapper over NSS. Perhaps this documentation will help?
We can provide the JKS keystore, but that'd be a lie; we'd probably have to implement the JKS spec. |
Simplest would be to patch datastax; I'll see what contributing upstream looks like. |
JSS fails to establish an SSL connection for Cassandra. This may be required by PKI ACME in certain environments.
Steps to reproduce:
Actual result: The client application failed to connect to Cassandra database over SSL.
Expected result: The client application should be able to connect to Cassandra database over SSL.
Additional info: The client application showed the following stack trace:
The stack trace points to the following code in DataStax Java Driver:
https://github.com/datastax/java-driver/blob/4.7.2/core/src/main/java/com/datastax/oss/driver/internal/core/config/cloud/CloudConfigFactory.java#L212
The text was updated successfully, but these errors were encountered: