[CASSANDRA-18811] Set right client auth for creating SSL context in mTLS optional mode

• Type: Bug
• Status: Resolved
• Priority: Normal
• Resolution: Fixed
• Fix Version/s: 5.1
• Component/s: Messaging/Client, Messaging/Internode
• Bug Category: Availability
• Severity: Low
• Complexity: Normal
• Discovered By: User Report
• Platform: All
• Since Version: 5.x

Source Control Link

https://github.com/apache/cassandra/commit/bfcb21fbebfef14fbfe626bfd39d66f5e5c51018

Test and Documentation Plan

Tests updated

• Assignee: Jyothsna Konisa
• Reporter: Jyothsna Konisa

Authors

Jyothsna Konisa

Reviewers

Andy Tolbert, Dinesh Joshi, Francisco Guerrero, Jon Meredith

• Created: 30/Aug/23 23:12
• Updated: 21/Oct/24 19:43
• Resolved: 19/Dec/23 20:55

Description

Adding a new value `optional` for require_client_auth in Encryption options. when require_client_auth is optional, the SSL context that is created will allow client connections that provide a client certificate along with the client connections that do not provide certificates.

Issue Links

• Dependency: CASSANDRA-18857 Allow CQL client certificate authentication to work without sending an AUTHENTICATE request
• links to: GitHub Pull Request #2652