Database Reference
In-Depth Information
Figure 4-27
.
The process to prepare and share a client's public key certificate with the server
The process of preparing and sharing certificates among Cassandra nodes is the
same, and each node has to export and share public key certificates with all other nodes
in the Cassandra cluster.
Once the certificate preparation process is complete, you need to enable and con-
nect command line clients with SSL encryption enabled. The next section will discuss
this process.
Connecting with SSL Encryption
The previous section discussed connecting with cqlsh having SSL enabled. Let's ex-
plore connecting with Cassandra-cli command line client with SSL encryption enabled.
Connecting via Cassandra-cli
Let's enable Cassandra for encrypted client-to-node encryption and connect with the
server in the Thrift way (using Cassandra-cli).
1.
First we need to configure the server for client-to-node encryption.
// enable server
enabled: true
