Great idea Eric Any reason to not include this in the docs/operating or as a utility in repo to make it easier for end users to find all information in one place? Know this has come up on other projects and we always fall into the same search/reply trap as well
-Jake On Monday, August 22, 2016, Eric Evans <john.eric.ev...@gmail.com> wrote: > Hi, > > The topic of configuring encryption comes up fairly often, so I > thought I'd make available to others what we use at the Wikimedia > Foundation. > > https://github.com/eevans/cassandra-ca-manager > > It allows you to define a self-signed root CA, along with keys and > certs for each of your machines in a YAML manifest file. The script > reads the manifest and generates everything you need (including Java > keystore and truststore files), and drops them in a directory of your > choosing. > > It's nothing fancy, but it works pretty well, and beats looking up all > of the baroque commands once a year to do it manually. > > Cheers, > > -- > Eric Evans > john.eric.ev...@gmail.com <javascript:;> >
