[jira] [Commented] (CASSANDRA-12773) cassandra-stress error for one way SSL

["Stefan Podkowinski (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/CASSANDRA-12773?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15903117#comment-15903117 ] 

Stefan Podkowinski commented on CASSANDRA-12773:
------------------------------------------------

Patch has been updated and CI results are in.

||2.2||3.0||3.11||trunk||
|[branch|https://github.com/spodkowinski/cassandra/tree/CASSANDRA-12733-2.2]|[branch|https://github.com/spodkowinski/cassandra/tree/CASSANDRA-12733-3.0]|[branch|https://github.com/spodkowinski/cassandra/tree/CASSANDRA-12733-3.11]|[branch|https://github.com/spodkowinski/cassandra/tree/CASSANDRA-12733-trunk]|
|[dtest|http://cassci.datastax.com/view/Dev/view/spodkowinski/job/spodkowinski-CASSANDRA-12733-2.2-dtest/]|[dtest|http://cassci.datastax.com/view/Dev/view/spodkowinski/job/spodkowinski-CASSANDRA-12733-3.0-dtest/]|[dtest|http://cassci.datastax.com/view/Dev/view/spodkowinski/job/spodkowinski-CASSANDRA-12733-3.11-dtest/]||
|[testall|http://cassci.datastax.com/view/Dev/view/spodkowinski/job/spodkowinski-CASSANDRA-12733-2.2-testall/]|[testall|http://cassci.datastax.com/view/Dev/view/spodkowinski/job/spodkowinski-CASSANDRA-12733-3.0-testall/]|[testall|http://cassci.datastax.com/view/Dev/view/spodkowinski/job/spodkowinski-CASSANDRA-12733-3.11-testall/]||


> cassandra-stress error for one way SSL 
> ---------------------------------------
>
>                 Key: CASSANDRA-12773
>                 URL: https://issues.apache.org/jira/browse/CASSANDRA-12773
>             Project: Cassandra
>          Issue Type: Bug
>          Components: Tools
>            Reporter: Jane Deng
>            Assignee: Stefan Podkowinski
>             Fix For: 2.2.x
>
>         Attachments: 12773-2.2.patch
>
>
> CASSANDRA-9325 added keystore/truststore configuration into cassandra-stress. However, for one way ssl (require_client_auth=false), there is no need to pass keystore info into ssloptions. Cassadra-stress errored out:
> {noformat}
> java.lang.RuntimeException: java.io.IOException: Error creating the initializing the SSL Context 
> at org.apache.cassandra.stress.settings.StressSettings.getJavaDriverClient(StressSettings.java:200) 
> at org.apache.cassandra.stress.settings.SettingsSchema.createKeySpacesNative(SettingsSchema.java:79) 
> at org.apache.cassandra.stress.settings.SettingsSchema.createKeySpaces(SettingsSchema.java:69) 
> at org.apache.cassandra.stress.settings.StressSettings.maybeCreateKeyspaces(StressSettings.java:207) 
> at org.apache.cassandra.stress.StressAction.run(StressAction.java:55) 
> at org.apache.cassandra.stress.Stress.main(Stress.java:117) 
> Caused by: java.io.IOException: Error creating the initializing the SSL Context 
> at org.apache.cassandra.security.SSLFactory.createSSLContext(SSLFactory.java:151) 
> at org.apache.cassandra.stress.util.JavaDriverClient.connect(JavaDriverClient.java:128) 
> at org.apache.cassandra.stress.settings.StressSettings.getJavaDriverClient(StressSettings.java:191) 
> ... 5 more 
> Caused by: java.io.IOException: Keystore was tampered with, or password was incorrect 
> at sun.security.provider.JavaKeyStore.engineLoad(JavaKeyStore.java:772) 
> at sun.security.provider.JavaKeyStore$JKS.engineLoad(JavaKeyStore.java:55) 
> at java.security.KeyStore.load(KeyStore.java:1445) 
> at org.apache.cassandra.security.SSLFactory.createSSLContext(SSLFactory.java:129) 
> ... 7 more 
> Caused by: java.security.UnrecoverableKeyException: Password verification failed 
> at sun.security.provider.JavaKeyStore.engineLoad(JavaKeyStore.java:770) 
> ... 10 more
> {noformat}
> It's a bug from CASSANDRA-9325. When the keystore is absent, the keystore is assigned to the path of the truststore, but the password isn't taken care.



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)