Re: Cassandra security using openssl or keytool

2015-10-29 Thread Jason J. W. Williams
> > I certainly don't vouch for the advisability of attempting a task you've > described as a "real pain" ... but if OP wants/needs to, it's their > funeral? :D > Agreed. I just wanted to elaborate what a "real pain" meant so OP would know I wasn't just blowing him off. -J

Re: Cassandra security using openssl or keytool

2015-10-29 Thread Robert Coli
On Thu, Oct 29, 2015 at 4:18 PM, Jason J. W. Williams < jasonjwwilli...@gmail.com> wrote: > I wasted 4-5 hours of my life recently importing an OpenSSL key in a PEM >> into a Cassandra keystore using exactly that article as a starting point >> (the server's hostname already had a certificate and k

Re: Cassandra security using openssl or keytool

2015-10-29 Thread Jason J. W. Williams
> > Google words like : > > " > import openssl private key into keytool > " > > Find results like : > > > http://stackoverflow.com/questions/906402/importing-an-existing-x509-certificate-and-private-key-in-java-keystore-to-use-i/8224863#8224863 > > I wasted 4-5 hours of my life recently importing a

Re: Cassandra security using openssl or keytool

2015-10-29 Thread Robert Coli
On Thu, Oct 29, 2015 at 1:08 AM, Vishwajeet Singh wrote: > But I want to do using OpenSSL because It's my requirement. > > Can somebody please guide me, How I will do Cassandra Client to node > security using SSL and I want to use OpenSSL (Not keytool). > Google words like : " import openssl pr

Re: Cassandra security using openssl or keytool

2015-10-29 Thread Vishwajeet Singh
But I want to do using OpenSSL because It's my requirement. Can somebody please guide me, How I will do Cassandra Client to node security using SSL and I want to use OpenSSL (Not keytool). On Thu, Oct 29, 2015 at 12:40 PM, Jason Williams wrote: > Because when you use keytool it stores the gener

Re: Cassandra security using openssl or keytool

2015-10-29 Thread Jason Williams
Because when you use keytool it stores the generated private key in the keystore and tags it waiting for the certificate. Then when you import the issued certificate it is paired in the same record with the key. It's a real pain to get OpenSSL encoded private keys into a keytool keystore. Don't

Cassandra security using openssl or keytool

2015-10-29 Thread Vishwajeet Singh
Hi, I saw Cassandra documentation. http://docs.datastax.com/en/cassandra/2.1/cassandra/security/secureSSLCertificates_t.html I found this line "SSL certificates must be generated using keytool". Can somebody explain me why SSL certificates must be generated using keytool? Can we use OpenSSL fo