Skip to content

Navigation Menu

Appearance settings

View all features
- BY COMPANY SIZE
  Enterprises
  Small and medium teams
  Startups
  Nonprofits
- BY USE CASE
  App Modernization
  DevSecOps
  DevOps
  CI/CD
  View all use cases
- BY INDUSTRY
  Healthcare
  Financial services
  Manufacturing
  Government
  View all industries
View all solutions
- EXPLORE BY TOPIC
  AI
  Software Development
  DevOps
  Security
  View all topics
- EXPLORE BY TYPE
  Customer stories
  Events & webinars
  Ebooks & reports
  Business insights
  GitHub Skills
- SUPPORT & SERVICES
  Documentation
  Customer support
  Community forum
  Trust center
  Partners
- COMMUNITY
  GitHub SponsorsFund open source developers
- PROGRAMS
  Security Lab
  Maintainer Community
  Accelerator
  Archive Program
- REPOSITORIES
  Topics
  Trending
  Collections
- ENTERPRISE SOLUTIONS
  Enterprise platformAI-powered developer platform
- AVAILABLE ADD-ONS
  GitHub Advanced SecurityEnterprise-grade security features
  Copilot for BusinessEnterprise-grade AI features
  Premium SupportEnterprise-grade 24/7 support
Pricing

Search code, repositories, users, issues, pull requests...

Search

Clear

Search syntax tips

Provide feedback

We read every piece of feedback, and take your input very seriously.

Include my email address so I can be contacted

Saved searches

Use saved searches to filter your results more quickly

Name

Query

To see all available qualifiers, see our documentation.

Appearance settings

You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session.

Dismiss alert

wireapp / wire-server Public

Notifications You must be signed in to change notification settings
Fork 332
Star 2.8k

Code
Issues 47
Pull requests 97
Discussions
Actions
Security 8
Insights

Additional navigation options

Code
Issues
Pull requests
Discussions
Actions
Security
Insights

Comments

Close side panel

TLS connections to Cassandra#3587

Merged

supersven merged 98 commits intodevelopwireapp/wire-server:developfrom

sventennie/cassandra-tlswireapp/wire-server:sventennie/cassandra-tlsCopy head branch name to clipboard

Dec 21, 2023

Conversation Commits98 (98)Checks Files changed

Merged

TLS connections to Cassandra#3587
supersven merged 98 commits intodevelopfrom
sventennie/cassandra-tls

Commits

Commits on Dec 21, 2023

Add option to configure TLS connections to Cassandra in schema-migrations
supersven
committed
WIP: Cassandra SSL in spar
supersven
committed
Cassandra SSL in brig
supersven
committed
Cassandra SSL for galley
supersven
committed
Add some TODOs
supersven
committed
Configure C* TLS in more places
supersven
committed
Add option to enable TLS to more C* inits
supersven
committed
Set vpFailIfNoPeerCert
supersven
committed
WIP: Scratch out TLS/C* in service Helm charts
supersven
committed
Some Helm fixes
supersven
committed
Fix useTLS in Helm charts
supersven
committed
Default to no cert in brig-index
supersven
committed
Fix: If cert is not set, use Nothing not empty string
supersven
committed
WIP: Teach cassandra-migrations TLS
supersven
committed
GHC option -threaded for brig-schema and galley-schema
supersven
committed
k8ssandra-test: Add client encryption options
supersven
committed
More Helming...
supersven
committed
Helming SSL support for the check-cluster-job
supersven
committed
check-cluster-job: Fix cqlsh command line args
supersven
committed
Fix cassandra-secret yaml files (wrong context)
supersven
committed
brig: Add some debug logs for TLS cert file path
supersven
committed
Make galley-migrate-data -threaded
supersven
committed
Happy Helming
supersven
committed
Formatting
supersven
committed
spar-data-migrate: Get the TLS cert file per target database
supersven
committed
Happy helming: Give spar-migrate-data access to certs for both cassandra connections
supersven
committed
Happy helming: Fix check-cluster-job
supersven
committed
Delete trace logs
supersven
committed
Provide one function to create C* connections for services
supersven
committed
Use defInitCassandra to reduce duplication
supersven
committed
Use defInitCassandra; reduce duplication
supersven
committed
Use defInitCassandra
supersven
committed
use defInitCassandra to reduce duplication
supersven
committed
Refactor to use one way to create the SSLContext
supersven
committed
--use-tls is gone
supersven
committed
Remove --use-tls from Helm charts
supersven
committed
Remove useTLS from test config files
supersven
committed
Remove useTLS from Helm charts
supersven
committed
Re-generate nix files
supersven
committed
Cleanup
supersven
committed
Cleaup: Delete obsolete option from values
supersven
committed
Remove Debug.Trace
supersven
committed
Federator's HTTP SSL does not belong to the C* story
supersven
committed
Add changelog
supersven
committed
setMaxStreams isn't needed
supersven
committed
Use common Helm structure to set certs
supersven
committed
Rename tlsCert -> tlsCa
supersven
committed
Take the CA string unencoded
supersven
committed
Let K8ssandra create the Java KeysStores
supersven
committed
Accept empty tlsCa
supersven
committed
Generate key pair in K8s as Secret
supersven
committed
Fix secret handling in case a CA PEM string is provided
supersven
committed
Add debug trace logs for SSL cert / integration
supersven
committed
Helm: Cassandra SSL for integration tests
supersven
committed
Debug log in integration-integration.yaml
supersven
committed
Helm: Ensure integration has cassandra certs
supersven
committed
integration-tests: Deploy TLS secured cassandra
supersven
committed
Clean up debug tracing: set -x
supersven
committed
Replace trace logs with print statements
supersven
committed
Add documentation
supersven
committed
More docs
supersven
committed
Remove self-signed cert from test setup
supersven
committed
Deal with strange Helm value punning
supersven
committed
Provide environments for integration testing
supersven
committed
Consider profile when destorying the Helmfile env
supersven
committed
Hi CI
supersven
committed
Improve changelog
supersven
committed
Better name: useCassandraCA -> useCassandraTLS
supersven
committed
Add comments
supersven
committed
Add comments about cassandra secrets
supersven
committed
Unify comments about TLS in values.yaml(s)
supersven
committed
cassandra-migrations: Specific config wins over general one
supersven
committed
Typo
supersven
committed
Useless formatting
supersven
committed
Fix wrong secret reference
supersven
committed
Better TLS comment
supersven
committed
Better comment
supersven
committed
Requiring the databases-ephemeral should be fine
supersven
committed
Cleanup
supersven
committed
Hi CI
supersven
committed
Update charts/elasticsearch-index/templates/migrate-data.yaml

supersven
and
akshaymankar
committed
Update charts/integration/templates/integration-integration.yaml

supersven
and
akshaymankar
committed
Rename: tls-certificate-file -> tls-ca-certificate-file
supersven
committed
Simplify certFilePath selection expression

supersven
and
akshaymankar
committed
Default cannot be shown for option --tls-ca-certificate-file
supersven
committed
Update docs/src/developer/reference/config-options.md

supersven
and
akshaymankar
committed
Fix missing import for `for`
supersven
committed
Move Cassandra Options
supersven
committed
Use CassandraOpts to hand over connection parameters
supersven
committed
More descriptive variable name
supersven
committed
Avoid type annotations by using monomorphic print function
supersven
committed
Remove superfluous log line
supersven
committed
Cleanup --replication-factor expression
supersven
committed
Allow newline to prevent negative wrapping
supersven
committed
New line to guard against line concatenating
supersven
committed
Use trust-manager to sync TLS CA secret
supersven
committed
Typo

supersven
and
akshaymankar
committed
Simplify name of trust-manager sync'ed secret

supersven
and
akshaymankar
committed

Footer

© 2026 GitHub, Inc.

Footer navigation

Terms
Privacy
Security
Status
Community
Docs
Contact

You can’t perform that action at this time.