“Não é possível ligar à porta”, ativando a criptografia do cliente Cassandra

Question

Estou executando o Cassandra 1.2 com um cluster de três nós, no Debian 7. O cluster está funcionando bem. Mas quero ativar a criptografia para clientes, conforme documentado aqui: ttp: //www.datastax.com/documentation/cassandra/1.2/webhelp/cassandra/security/secureSSLClientToNode_t.html

Mas quando eu reinicio o Cassandra depois de fazer a alteração de configuração necessária, eu recebo esse erro no log e o Cassandra falha:

 INFO 20:12:16,734 enabling encrypted thrift connections between client and server
java.lang.reflect.InvocationTargetException
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
        at java.lang.reflect.Method.invoke(Unknown Source)
        at org.apache.commons.daemon.support.DaemonLoader.start(DaemonLoader.java:243)
Caused by: java.lang.RuntimeException: Unable to create thrift socket to /192.168.0.1:9160
        at org.apache.cassandra.thrift.CustomTThreadPoolServer$Factory.buildTServer(CustomTThreadPoolServer.java:267)
        at org.apache.cassandra.thrift.TServerCustomFactory.buildTServer(TServerCustomFactory.java:46)
        at org.apache.cassandra.thrift.ThriftServer$ThriftServerThread.<init>(ThriftServer.java:105)
        at org.apache.cassandra.thrift.ThriftServer.start(ThriftServer.java:52)
        at org.apache.cassandra.service.CassandraDaemon.start(CassandraDaemon.java:400)
        ... 5 more
Caused by: org.apache.thrift.transport.TTransportException: Could not bind to port 9160
        at org.apache.thrift.transport.TSSLTransportFactory.createServer(TSSLTransportFactory.java:117)
        at org.apache.thrift.transport.TSSLTransportFactory.getServerSocket(TSSLTransportFactory.java:103)
        at org.apache.cassandra.thrift.CustomTThreadPoolServer$Factory.buildTServer(CustomTThreadPoolServer.java:257)
        ... 9 more
Caused by: java.lang.IllegalArgumentException: Cannot support TLS_RSA_WITH_AES_256_CBC_SHA with currently installed providers
        at sun.security.ssl.CipherSuiteList.<init>(Unknown Source)
        at sun.security.ssl.SSLServerSocketImpl.setEnabledCipherSuites(Unknown Source)
        at org.apache.thrift.transport.TSSLTransportFactory.createServer(TSSLTransportFactory.java:113)
        ... 11 more
Cannot start daemon
Service exit with a return value of 5

Log de saída de log completo

cassandra.yaml Gist

O que estou perdendo?

    

Answer 1

Você precisa adicionar a extensão de criptografia java. Veja uma postagem no blog sobre esse problema aqui:

link