[ 
https://issues.apache.org/jira/browse/CASSANDRA-18124?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17703974#comment-17703974
 ] 

Tibor Repasi commented on CASSANDRA-18124:
------------------------------------------

One minor issue: nodetool is complaining about configuration
{code}
% bin/nodetool stopdaemon
WARN  08:50:50,063 Only 20,213GiB free across all data volumes. Consider adding 
more capacity to your cluster or removing obsolete snapshots
WARN  08:50:50,566 'keystore_password' and 'key_password' both are configured 
but since the values match it's okay. Ideally you should only specify one of 
them.
WARN  08:50:50,567 'keystore_password' and 'key_password' both are configured 
but since the values match it's okay. Ideally you should only specify one of 
them.
Cassandra has shutdown.
{code}


> Config parameter keystore_password should be nullable
> -----------------------------------------------------
>
>                 Key: CASSANDRA-18124
>                 URL: https://issues.apache.org/jira/browse/CASSANDRA-18124
>             Project: Cassandra
>          Issue Type: Bug
>          Components: Local/Config
>            Reporter: Tibor Repasi
>            Assignee: Maulin Vasavada
>            Priority: Normal
>             Fix For: 4.1.x, 5.x
>
>          Time Spent: 20m
>  Remaining Estimate: 0h
>
> Some SSL configuration may pass unencrypted private keys. PEMReader might 
> accept that by assuming keyPassword to be null in that case (e.g. 
> https://github.com/apache/cassandra/blob/f9e033f519c14596da4dc954875756a69aea4e78/src/java/org/apache/cassandra/security/PEMReader.java#L103).
> Current configuration reader does not accept keystore_password parameter to 
> be set null or empty in the cassandra.yaml.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscr...@cassandra.apache.org
For additional commands, e-mail: commits-h...@cassandra.apache.org

Reply via email to