[CASSANDRA-11708] sstableloader not work with ssl options

• Type: Bug
• Status: Resolved
• Priority: Low
• Resolution: Fixed
• Fix Version/s: 2.2.7, 3.0.7, 3.7
• Component/s: Legacy/Tools
• Severity: Low
• Assignee: Yuki Morishita
• Reporter: Bin Chen

Authors

Yuki Morishita

Reviewers

Alex Petrov

• Created: 04/May/16 04:02
• Updated: 16/Apr/19 09:30
• Resolved: 24/May/16 19:50

Description

My cassandra server start with client_encryption_options.

client_encryption_options:
    enabled: true
    keystore: /path/to/keystore.node0
    keystore_password: cassandra
    require_client_auth: true
    truststore: /path/to/truststore.node0
    truststore_password: cassandra

when I use sstableloader with -ts/-tspw/-ks/-kspw, I get

All host(s) tried for query failed (tried: localhost/127.0.0.1:9042 (com.datastax.driver.core.TransportException: [localhost/127.0.0.1:9042] Channel has been closed))
com.datastax.driver.core.exceptions.NoHostAvailableException: All host(s) tried for query failed (tried: localhost/127.0.0.1:9042 (com.datastax.driver.core.TransportException: [localhost/127.0.0.1:9042] Channel has been closed))

after looked at the code, I found only one way to active ssl is use -f with a configuration yaml file which has

client_encryption_options:
    enabled: true

so I think it's a bug, better to active ssl when I set -ts and -tspw.

Issue Links

• relates to: CASSANDRA-10391 sstableloader fails with client SSL enabled with non-standard keystore/truststore location