[CASSANDRA-14064] Allow using file based certificates instead of keystores

• Type: New Feature
• Status: Patch Available
• Priority: Normal
• Resolution: Unresolved
• Fix Version/s: 5.x
• Component/s: Legacy/Streaming and Messaging
• Labels: security
• Assignee: Unassigned
• Reporter: Stefan Podkowinski
• Created: 21/Nov/17 12:27
• Updated: 07/Mar/23 10:54

Description

The requirement of having to use a secure archive (keystore) for your certificates and keys is not very common outside the Java ecosystem. Most servers will accept individual certificate and key files and will come with instructions how to generate those using openssl. This should also be an option for Cassandra for users who see no reason in additionally having to deal with keystores.

Issue Links

• depends upon: CASSANDRA-13971 Automatic certificate management using Vault