[CASSANDRA-14222] Add hot reloading of SSL Certificates capability to Cassandra

• Type: New Feature
• Status: Resolved
• Priority: Normal
• Resolution: Fixed
• Fix Version/s: 4.0-alpha1, 4.0
• Labels: security
• Assignee: Dinesh Joshi
• Reporter: Dinesh Joshi

Authors

Dinesh Joshi

Reviewers

Jason Brown

• Created: 07/Feb/18 23:03
• Updated: 14/Jun/20 15:45
• Resolved: 09/Feb/18 13:35

Description

Cassandra does not currently hot reload SSL certificates. For ease of operation it would be useful if we add this capability. This patch would watch changes to the truststore & keystore and would reload them when they're changed.

Issue Links

• relates to: CASSANDRA-14991 SSL Cert Hot Reloading should check for sanity of the new keystore/truststore before loading it