Connecting over SSL via cqlsh requires the use of the cqlshrc file. As indicated in the previous section, your cqlshrc file should be adjusted to reference the PEM file created in the prior step:
[connection]factory = cqlshlib.ssl.ssl_transport_factory[ssl]certfile = /home/aploetz/.cassandra/permanentWaves.pemvalidate = false
Along with specifying the PEM file in the [ssl] section, you will also need to specify whether the certificate should be validated at connection time. This feature is used for two-way SSL. Additionally, you will need to define factory in the [connection] section. Using the delivered ssl_transport_factory will suffice.
