You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cassandra.apache.org by "Yuki Morishita (JIRA)" <ji...@apache.org> on 2016/05/04 08:11:12 UTC
[jira] [Updated] (CASSANDRA-11708) sstableloader not work with ssl
options
[ https://issues.apache.org/jira/browse/CASSANDRA-11708?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Yuki Morishita updated CASSANDRA-11708:
---------------------------------------
Fix Version/s: 3.x
3.0.x
2.2.x
Status: Patch Available (was: Open)
I think this has been broken since we switched to use native driver in 2.2.
{{BulkLoader.buildSSLOption}} checks {{enabled}} in client enc option but never is set.
Patch to set {{enabled}} when either of those 4 options (-ts/-tspw/-ks/-kspw) is set.
||branch||testall||dtest||
|[11708-2.2|https://github.com/yukim/cassandra/tree/11708-2.2]|[testall|http://cassci.datastax.com/view/Dev/view/yukim/job/yukim-11708-2.2-testall/lastCompletedBuild/testReport/]|[dtest|http://cassci.datastax.com/view/Dev/view/yukim/job/yukim-11708-2.2-dtest/lastCompletedBuild/testReport/]|
|[11708-3.0|https://github.com/yukim/cassandra/tree/11708-3.0]|[testall|http://cassci.datastax.com/view/Dev/view/yukim/job/yukim-11708-3.0-testall/lastCompletedBuild/testReport/]|[dtest|http://cassci.datastax.com/view/Dev/view/yukim/job/yukim-11708-3.0-dtest/lastCompletedBuild/testReport/]|
|[11708-3.7|https://github.com/yukim/cassandra/tree/11708-3.7]|[testall|http://cassci.datastax.com/view/Dev/view/yukim/job/yukim-11708-3.7-testall/lastCompletedBuild/testReport/]|[dtest|http://cassci.datastax.com/view/Dev/view/yukim/job/yukim-11708-3.7-dtest/lastCompletedBuild/testReport/]|
(test pending)
> sstableloader not work with ssl options
> ---------------------------------------
>
> Key: CASSANDRA-11708
> URL: https://issues.apache.org/jira/browse/CASSANDRA-11708
> Project: Cassandra
> Issue Type: Bug
> Components: Tools
> Reporter: Bin Chen
> Assignee: Yuki Morishita
> Priority: Minor
> Fix For: 2.2.x, 3.0.x, 3.x
>
>
> My cassandra server start with client_encryption_options.
> {code}
> client_encryption_options:
> enabled: true
> keystore: /path/to/keystore.node0
> keystore_password: cassandra
> require_client_auth: true
> truststore: /path/to/truststore.node0
> truststore_password: cassandra
> {code}
> when I use sstableloader with -ts/-tspw/-ks/-kspw, I get
> {code}
> All host(s) tried for query failed (tried: localhost/127.0.0.1:9042 (com.datastax.driver.core.TransportException: [localhost/127.0.0.1:9042] Channel has been closed))
> com.datastax.driver.core.exceptions.NoHostAvailableException: All host(s) tried for query failed (tried: localhost/127.0.0.1:9042 (com.datastax.driver.core.TransportException: [localhost/127.0.0.1:9042] Channel has been closed))
> {code}
> after looked at the code, I found only one way to active ssl is use -f with a configuration yaml file which has
> {code}
> client_encryption_options:
> enabled: true
> {code}
> so I think it's a bug, better to active ssl when I set -ts and -tspw.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)