如何为 Spring 数据 Cassandra 配置 SSL 客户端

Question

The only option that I can find for configuring the SSL configuration is spring.data.cassandra.ssl=true/false . We need to configure a key store and trust store to enable two-way SSL between the client and the cluster.

Is this possible out of the box or do I need to configure the cluster manually with my own @Configuration object?

Answer 1

I just wrote everything in the application.properties file

server.ssl.enabled=true
server.ssl.key-store=classpath:xyz.jks
server.ssl.key-store-password=xyz
server.ssl.key-store-type=JKS
server.ssl.key-alias=xyz

Answer 2

Create a bean CqlSessionBuilderCustomizer to populate SSL details. Build your own SSLContext using truststore and keystore.

  @Bean
  public CqlSessionBuilderCustomizer cqlSessionBuilderCustomizer() {
      return cqlSessionBuilder -> {
        try {
            cqlSessionBuilder
                      .withSslContext(buildContext());
        } catch (Exception e) {
            e.printStackTrace();
        }
    };