[CASSANDRA-17513] Adding support for TLS client authentication for internode communication

• Type: Improvement
• Status: Resolved
• Priority: Normal
• Resolution: Fixed
• Fix Version/s: 5.0-alpha1, 5.0
• Component/s: Feature/Encryption, Local/Config
• Change Category: Operability
• Complexity: Normal
• Platform: All

Source Control Link

https://github.com/apache/cassandra/commit/ed3901823a5fe9f8838d8b592a1b7703b12e810b

Test and Documentation Plan

unit test

• Assignee: Jyothsna Konisa
• Reporter: Jyothsna Konisa

Authors

Jyothsna Konisa

Reviewers

Bernardo Botella, Francisco Guerrero, Jon Meredith, Maulin Vasavada, Yifan Cai

• Created: 01/Apr/22 14:37
• Updated: 12/Sep/23 13:03
• Resolved: 24/May/22 20:14

Description

Same keystore is being set for both Inbound and outbound connections but we should use a keystore with server certificate for Inbound connections and a keystore with client certificates for outbound connections. So we should add a new property in Cassandra.yaml to pass outbound keystore and use it in SSLContextFactory for creating outbound SSL context.