You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cassandra.apache.org by "Jyothsna Konisa (Jira)" <ji...@apache.org> on 2022/11/10 18:29:00 UTC
[jira] [Created] (CASSANDRA-18034) Adding endpoint verification option to client_encryption_options
Jyothsna Konisa created CASSANDRA-18034:
-------------------------------------------
Summary: Adding endpoint verification option to client_encryption_options
Key: CASSANDRA-18034
URL: https://issues.apache.org/jira/browse/CASSANDRA-18034
Project: Cassandra
Issue Type: New Feature
Reporter: Jyothsna Konisa
Add a new property `client_encryption_options.require_endpoint_verification` in cassandra.yaml to enable endpoint verification on client connections optionally. When this property is set to true, the IP/hostname of the client is verified against the IP/hostname that is present in the SAN of the client certificates. This would help in preventing clients stealing certificates from the hosts and using them while connecting to cassandra.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@cassandra.apache.org
For additional commands, e-mail: commits-help@cassandra.apache.org