New ssl certs

README.md

@@ -2,3 +2,31 @@
 Docker environment for DataGrip testing
 
 Also see https://github.com/DataGrip/docker-env-oracle for Oracle 11 and https://github.com/DataGrip/docker-env-db2 for Db2
+
+
+### Create certificates
+
+For creating self-signed certificates run:  
+
+#### With default values:
+`./generatessl.sh`  
+
+#### With custom values:  
+`CERT_DIR=</path/to/certificates> CERT_CN="<your-CN-name>" DOMAIN=<your-domain-name> EXTRA_DOMAINS="192.168.1.10,api.myapp.local" DAYS=<certificates-duration> KEY_SIZE=<key-size> ./generatessl.sh`  
+
+#### With ECDSA instead of RSA
+`USE_ECDSA=true ./generatessl.sh`
+
+
+**The default values are:**  
+CERT_DIR = ./certs  
+CERT_CN = Universal  
+DOMAIN = localhost  
+DAYS = 3650  
+KEY_SIZE = 2048
+
+Example:  
+`CERT_DIR=./clickhouse/ssl/25/certs CERT_CN="Clickhouse" DOMAIN=my.domain EXTRA_DOMAINS="192.168.1.10" DAYS=30 KEY_SIZE=4096 ./generatessl.bash`    
+
+Check the certificate:    
+`openssl.exe x509 -in path/to/your/cert -noout -text`    

cassandra/5-ssl/Dockerfile

@@ -0,0 +1,21 @@
+FROM registry.jetbrains.team/p/datagrip/containers/cassandra:5
+
+RUN mkdir -p /etc/cassandra/ /etc/cassandra/certs
+COPY ./certs/* /etc/cassandra/certs/
+
+COPY ./cassandra.yaml /etc/cassandra/
+RUN chown cassandra:cassandra /etc/cassandra/cassandra.yaml
+RUN chown -R cassandra:cassandra /etc/cassandra/
+
+EXPOSE 9042
+
+ADD entrypoint.sh /
+ADD init.sh /
+RUN chmod +x /entrypoint.sh && \
+	chmod +x /init.sh
+
+RUN mkdir -p /root/.cassandra
+ADD cqlshrc /root/.cassandra/cqlshrc
+
+ENTRYPOINT ["/entrypoint.sh"]
+CMD ["cassandra", "-f"]

cassandra/5-ssl/cassandra.yaml

@@ -0,0 +1,59 @@
+cluster_name: 'Test SSL Cluster'
+num_tokens: 16
+listen_address: 0.0.0.0
+rpc_address: 0.0.0.0
+broadcast_rpc_address: 0.0.0.0
+
+authenticator: PasswordAuthenticator
+authorizer: CassandraAuthorizer
+
+commitlog_sync: periodic
+commitlog_sync_period: 10s
+commitlog_segment_size: 32MiB
+partitioner: org.apache.cassandra.dht.Murmur3Partitioner
+
+client_encryption_options:
+  enabled: true
+  optional: false
+  keystore: /etc/cassandra/certs/server.keystore
+  keystore_password: cassandra
+  require_client_auth: true
+  truststore: /etc/cassandra/certs/cassandra.truststore
+  truststore_password: cassandra
+  protocol: TLS
+  algorithm: SunX509
+  store_type: JKS
+  cipher_suites: [TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA,
+                  TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_256_CBC_SHA,
+                  TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA]
+
+server_encryption_options:
+  internode_encryption: none
+  keystore: /etc/cassandra/certs/server.keystore
+  keystore_password: cassandra
+  truststore: /etc/cassandra/certs/cassandra.truststore
+  truststore_password: cassandra
+  legacy_ssl_storage_port_enabled: false
+  protocol: TLS
+  algorithm: SunX509
+  store_type: JKS
+  cipher_suites: [TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA,
+                  TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_256_CBC_SHA,
+                  TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA]
+  require_client_auth: false
+  require_endpoint_verification: false
+
+seed_provider:
+  - class_name: org.apache.cassandra.locator.SimpleSeedProvider
+    parameters:
+      - seeds: "127.0.0.1"
+
+concurrent_reads: 32
+concurrent_writes: 32
+concurrent_counter_writes: 32
+
+# This feature is deprecated since Cassandra 5.0 and will be removed.
+# native_transport_port_ssl: 9142
+native_transport_port: 9042
+storage_port: 7000
+endpoint_snitch: SimpleSnitch

cassandra/5-ssl/certs/ca-cert.pem

@@ -0,0 +1,19 @@
+-----BEGIN CERTIFICATE-----
+MIIDHTCCAgWgAwIBAgIUBP8gH6jePal/o1hf20Ac1sV10/8wDQYJKoZIhvcNAQEL
+BQAwFjEUMBIGA1UEAwwLQ2Fzc2FuZHJhQ0EwHhcNMjUxMjE3MTMzMzIwWhcNMzUx
+MjE1MTMzMzIwWjAWMRQwEgYDVQQDDAtDYXNzYW5kcmFDQTCCASIwDQYJKoZIhvcN
+AQEBBQADggEPADCCAQoCggEBAJohKbjWdr74SWrHdfJSqL4zaa+U5hU/cZgM4Nc6
+NeiwQkLnAC04WfVI/N3OqLwyHDgW3VwWbwp/O4qOtwrhF9y5MiXTfeoTgf+vH5MI
+3MJSrfjXm+gSbfaiSp3sdxG9ppHXKkqPUOt2dpW1f2yWWvPxH63cufulcGOQv9Fl
+YgfuKfIBfixkj8MpQTffKr76zq7Yx9baM6tvzMJJyOs833NS7FKi+a30lvxgQhhb
++5thuCxLF6yckUboI8ZbBQ6LTHJSmauuPC5sAoZdZSCLgOmz2uTB1sjXe7v1AX3G
+B4ucLvKQbFmwApqM00nyX9AZI1owqiQ8xDoUdFA1GuJsi4sCAwEAAaNjMGEwHQYD
+VR0OBBYEFGBNq0XThAUTn4NkS26+MJEfWzRgMB8GA1UdIwQYMBaAFGBNq0XThAUT
+n4NkS26+MJEfWzRgMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMA0G
+CSqGSIb3DQEBCwUAA4IBAQBrOrLBxk75KYiicI/L5I35tm8zhGkGuaxZ0u8BLtoL
+lgSFbM2asQIsdQSOPkVTdp/rCAEfW4AdHpQRnZuNn3G2SudeMee2mAbtlddHUY/G
+J86lv66UpH65Bc6J0/6KK4wwpUSFOfUQdTAWQFggpGJ14ndDV4T0dwDPB2mAs5du
+BHUwM/TF2HgqhpTG86PnP4pbqei7+z71mIGK3vqpi745jKhbQ4w8TQOtVZeW3+Tm
+igY5wrPYyWDQTtzebxJOn4iauap6BU/vK/hEG2LRVIxn9MmLWKe28ehGZXht9sdL
+BFWRG9AOdqCHb6MwehhHevtbHCN3xyeL8Gdoce4y+yTE
+-----END CERTIFICATE-----

cassandra/5-ssl/certs/ca-cert.srl

@@ -0,0 +1 @@
+7FB9E62234ABD905D30D968F4BC931A4450D4E19

cassandra/5-ssl/certs/ca-key.pem

@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----
+MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQCaISm41na++Elq
+x3XyUqi+M2mvlOYVP3GYDODXOjXosEJC5wAtOFn1SPzdzqi8Mhw4Ft1cFm8KfzuK
+jrcK4RfcuTIl033qE4H/rx+TCNzCUq3415voEm32okqd7HcRvaaR1ypKj1DrdnaV
+tX9sllrz8R+t3Ln7pXBjkL/RZWIH7inyAX4sZI/DKUE33yq++s6u2MfW2jOrb8zC
+ScjrPN9zUuxSovmt9Jb8YEIYW/ubYbgsSxesnJFG6CPGWwUOi0xyUpmrrjwubAKG
+XWUgi4Dps9rkwdbI13u79QF9xgeLnC7ykGxZsAKajNNJ8l/QGSNaMKokPMQ6FHRQ
+NRribIuLAgMBAAECggEAE1Gdz6e+CZDIbwRiQcXflbuO/y2MK1Sg8dyHYCLROAHD
+xGv85y4dhHOqEklBeBlV1Sf0hgLf1zJ8bZEW21u8aHOkF/6q1SitzjUOoZjmRssj
+OEIaLhwFQXk1HhdSE1ywoK4WBHNzQpg+I+S0fJFaBCKQhHPasfKaJDiz+lSZVYHw
+TEo/QE4iqcwMq36BF3YYi70hXABsXZ4ym6/eo1n5UqPEfkSaW3YLnshui5HP7Whr
+c1a7vtJAWAAFpDfCwzH1b7igY3JDcIjm3l8BL2jhRbiiJSvjcvwpIZgTzpkpshdt
+A84T3xcRKzK4lxQMfimUFC9qWLsd5abzEaUphekXDQKBgQDRxCWnA7SMJ4s9OrEX
+jOPaQlbr8sniGolLdzY/w0OXUBI/hqEEvcQ42BbcmFV1b1jZSOF/sdVwUS8wPUHs
+9L+Bam3v+bg9yGslJvHhovW4AYr5knqEfcQI8qA4tnW+9DUy0axCjsV1a8kekUKO
+Z6UApiP3NZfJjf6vJ6xRmgsp7wKBgQC8GcWadvHliU0xFR/Yg6Af6z9V4TwL4ZFH
+aLLig2Aeb6o5hMdFMz3/5+ts8sb64DdnTW2UgMjuX0fN9ZmV6a/ZoDETF0WLYH4C
+J1/vLozVvlMMvU/LXvSXjXE5kpmWsnL+1SSvA+b5oGSxOMCo/y2WYJtqVIWjrxjh
+NA7VrxREJQKBgGm+5fRSC9xzut+9DLWAkwTeWI9Nr7RKCFiA2lo+h35qISjhJ58K
+QzccyDmgmcQ/w5yV/weukJi0dINu/iMEJt6I1q8ZRmXu+QSbo2hKDHEcZgD2dMkB
+1adlGJw+bxE6bu8VgC91ZdmR4quEMvczDJ1NI+hlngU/jdqit13TuDkFAoGBALI9
+4afrSnFt1/3IvLKYl+VnME8a7aF8kAQQzGIkh7KPschrb8C9O+UBSW+l5rPYP+fd
+0RbFqqFnHE2oi28pT/9y8s3aYYYfW4iC8z9c5wusHFqYEcLvKetqln4t0uigFKQy
+KV7G3dpyCLh+xOHfXL2AsgTiLvjadUMB54TJMPUZAoGBAI80ZPQ6mMxCh/1/9oOF
+8bWn2+F/QhqPtGRDFdRulhVv8MPWmXEtV1m/xap8zYa5e1wASYIXIcH0DJHAKHsZ
+xNZJE12ff3S/ryxQ6uOWOciz0qcn3Vu7sKmoWes7zui1PRtxX4THhYCwXaoyvYoH
+vsarJxr3oyUX2ER3F0xjHSCI
+-----END PRIVATE KEY-----

cassandra/5-ssl/certs/client-cert.pem

@@ -0,0 +1,45 @@
+Bag Attributes
+    friendlyName: client
+    localKeyID: 54 69 6D 65 20 31 37 36 35 39 37 38 34 30 34 33 38 34 
+subject=CN = cassandra-client
+issuer=CN = CassandraCA
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+Bag Attributes
+    friendlyName: CN=CassandraCA
+subject=CN = CassandraCA
+issuer=CN = CassandraCA
+-----BEGIN CERTIFICATE-----
+MIIDHTCCAgWgAwIBAgIUBP8gH6jePal/o1hf20Ac1sV10/8wDQYJKoZIhvcNAQEL
+BQAwFjEUMBIGA1UEAwwLQ2Fzc2FuZHJhQ0EwHhcNMjUxMjE3MTMzMzIwWhcNMzUx
+MjE1MTMzMzIwWjAWMRQwEgYDVQQDDAtDYXNzYW5kcmFDQTCCASIwDQYJKoZIhvcN
+AQEBBQADggEPADCCAQoCggEBAJohKbjWdr74SWrHdfJSqL4zaa+U5hU/cZgM4Nc6
+NeiwQkLnAC04WfVI/N3OqLwyHDgW3VwWbwp/O4qOtwrhF9y5MiXTfeoTgf+vH5MI
+3MJSrfjXm+gSbfaiSp3sdxG9ppHXKkqPUOt2dpW1f2yWWvPxH63cufulcGOQv9Fl
+YgfuKfIBfixkj8MpQTffKr76zq7Yx9baM6tvzMJJyOs833NS7FKi+a30lvxgQhhb
++5thuCxLF6yckUboI8ZbBQ6LTHJSmauuPC5sAoZdZSCLgOmz2uTB1sjXe7v1AX3G
+B4ucLvKQbFmwApqM00nyX9AZI1owqiQ8xDoUdFA1GuJsi4sCAwEAAaNjMGEwHQYD
+VR0OBBYEFGBNq0XThAUTn4NkS26+MJEfWzRgMB8GA1UdIwQYMBaAFGBNq0XThAUT
+n4NkS26+MJEfWzRgMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMA0G
+CSqGSIb3DQEBCwUAA4IBAQBrOrLBxk75KYiicI/L5I35tm8zhGkGuaxZ0u8BLtoL
+lgSFbM2asQIsdQSOPkVTdp/rCAEfW4AdHpQRnZuNn3G2SudeMee2mAbtlddHUY/G
+J86lv66UpH65Bc6J0/6KK4wwpUSFOfUQdTAWQFggpGJ14ndDV4T0dwDPB2mAs5du
+BHUwM/TF2HgqhpTG86PnP4pbqei7+z71mIGK3vqpi745jKhbQ4w8TQOtVZeW3+Tm
+igY5wrPYyWDQTtzebxJOn4iauap6BU/vK/hEG2LRVIxn9MmLWKe28ehGZXht9sdL
+BFWRG9AOdqCHb6MwehhHevtbHCN3xyeL8Gdoce4y+yTE
+-----END CERTIFICATE-----

cassandra/5-ssl/certs/client-key.pem

@@ -0,0 +1,32 @@
+Bag Attributes
+    friendlyName: client
+    localKeyID: 54 69 6D 65 20 31 37 36 35 39 37 38 34 30 34 33 38 34 
+Key Attributes: <No Attributes>
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

cassandra/5-ssl/certs/client.csr

@@ -0,0 +1,16 @@
+-----BEGIN NEW CERTIFICATE REQUEST-----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+-----END NEW CERTIFICATE REQUEST-----

cassandra/5-ssl/certs/server-cert.pem

@@ -0,0 +1,17 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

cassandra/5-ssl/certs/server.csr

@@ -0,0 +1,16 @@
+-----BEGIN NEW CERTIFICATE REQUEST-----
+MIICkDCCAXgCAQAwGzEZMBcGA1UEAxMQY2Fzc2FuZHJhLXNlcnZlcjCCASIwDQYJ
+KoZIhvcNAQEBBQADggEPADCCAQoCggEBAKj7Yxov4XFb974m9GJrWaL3pNt8gr3n
+qAIwpEyBhLJ91ivHyKFdMF0QwyY+F01fZaffl0NLCI2+vM3K4Y44EAcub1sDjk4A
+cqLiiSl/0y/cz2kNwF8fajcvZ7b9VXVC50v8B/E0osmzcJEDCQELoZo6Y2k6W75G
+ult6zz9aQs/C593bf2RZvD8Ng6LDQhqy4GxRwXOeKvTpGXLPvPPibPtEPWq3NELS
+pKVFZQX4TjnWGlKWcB5lx/lLKjn6ia2uvgT6+cMVun31PRpA/DgBeaBcV6J1CK/4
+1296T0Jd7xWe+Y3knk5NTkVMMK5PRjIARKHDZOzy70griUnhUpcIxaUCAwEAAaAw
+MC4GCSqGSIb3DQEJDjEhMB8wHQYDVR0OBBYEFPXls9yUhTx5uPhmqLWVEiipVj3f
+MA0GCSqGSIb3DQEBDAUAA4IBAQCRcg80kJ+E9j2/hfnuaQfOy6kbmuO2fSSsZJk7
+FbHYAqb9h+dGKf6EywDKm3U/9PjP2Q7YJ1715jIhz3fIqIGWIyCmLInqpSN7jpmQ
+qwc9wEHjEXXW6FK+1nZpRDGqXIBw7lmUUEjljb450cUPjiOJLQW2lWVvNr6sYSu7
+bzUc9Wl6d9pRstSSFrE0tBi3Lh89Tj0A3FZvQOZPYkUK6n5aPe8x35lXe8fTex93
+2M4q70AqxzHRRRGCXqh+QHwuzG8V73xw2g5W2FHU3X3sl0MzNgUzXbJIh0KRBzci
+XdLZy/D0CAvTVUN+rpJa1UuCpkvZ1gMpsBL2T0DJanD/nvXC
+-----END NEW CERTIFICATE REQUEST-----

cassandra/5-ssl/cqlshrc

@@ -0,0 +1,8 @@
+[connection]
+ssl = true
+
+[ssl]
+certfile = /etc/cassandra/certs/ca-cert.pem
+userkey = /etc/cassandra/certs/client-key.pem
+usercert = /etc/cassandra/certs/client-cert.pem
+validate = true

cassandra/5-ssl/entrypoint.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+
+(/init.sh >> /var/log/init.log 2>&1) &
+
+exec /usr/local/bin/docker-entrypoint.sh "$@"