Hi, The topic of configuring encryption comes up fairly often, so I thought I'd make available to others what we use at the Wikimedia Foundation.
https://github.com/eevans/cassandra-ca-manager It allows you to define a self-signed root CA, along with keys and certs for each of your machines in a YAML manifest file. The script reads the manifest and generates everything you need (including Java keystore and truststore files), and drops them in a directory of your choosing. It's nothing fancy, but it works pretty well, and beats looking up all of the baroque commands once a year to do it manually. Cheers, -- Eric Evans john.eric.ev...@gmail.com
