Both client-to-node and node-to-node SSL require creation of a certificate for use with Cassandra. These certificates must also be added into Java keyStores (a keyStore and a trustStore). However, cqlsh is written in Python, and does not use a Java keyStore. Therefore, the certificate must be converted and exported into a PKCS12 (public key certificate standards) certificate file for use with cqlsh. Creating the certificate and connecting with it via cqlsh can be accomplished with some simple steps, which we will cover here.
Connecting with cqlsh over SSL
Get Mastering Apache Cassandra 3.x - Third Edition now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
