{"action":"created","issue":{"url":"https://api.github.com/repos/scylladb/scylla/issues/1813","repository_url":"https://api.github.com/repos/scylladb/scylla","labels_url":"https://api.github.com/repos/scylladb/scylla/issues/1813/labels{/name}","comments_url":"https://api.github.com/repos/scylladb/scylla/issues/1813/comments","events_url":"https://api.github.com/repos/scylladb/scylla/issues/1813/events","html_url":"https://github.com/scylladb/scylla/issues/1813","id":187544941,"number":1813,"title":"Proper TLS support - require_client_auth, specific cipher_suites, and secure nodetool ","user":{"login":"bobymicroby","id":927575,"avatar_url":"https://avatars.githubusercontent.com/u/927575?v=3","gravatar_id":"","url":"https://api.github.com/users/bobymicroby","html_url":"https://github.com/bobymicroby","followers_url":"https://api.github.com/users/bobymicroby/followers","following_url":"https://api.github.com/users/bobymicroby/following{/other_user}","gists_url":"https://api.github.com/users/bobymicroby/gists{/gist_id}","starred_url":"https://api.github.com/users/bobymicroby/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bobymicroby/subscriptions","organizations_url":"https://api.github.com/users/bobymicroby/orgs","repos_url":"https://api.github.com/users/bobymicroby/repos","events_url":"https://api.github.com/users/bobymicroby/events{/privacy}","received_events_url":"https://api.github.com/users/bobymicroby/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2016-11-06T06:20:36Z","updated_at":"2016-11-06T06:41:41Z","closed_at":null,"body":"Hi team!\r\n\r\nThanks for the awesome product. We started evaluating scylla as C* replacement. So far things are looking good. Only trouble is that we are forced to operate in an insecure environment, and therefore we need to be able to enforce a strong security policy. What troubles me is that :\r\n\r\n- there is no support for **require_client_auth** ( correct me if I'm wrong, i did just a very brief digging in the source code)\r\n\r\n- there is no support for setting a specific **cipher_suites** and disabling insecure ones ( again maybe i'm wrong, but it looks to me that option cipher_suites is never parsed anywhere in the code)  \r\n\r\n- there is no support for **securing nodetool** like in [cassandra]\r\n(https://docs.datastax.com/en/cassandra/2.1/cassandra/security/secureNodetoolSSL.html)\r\n\r\n\r\nRegards, Bobby.\r\n\r\n \r\n"},"comment":{"url":"https://api.github.com/repos/scylladb/scylla/issues/comments/258663630","html_url":"https://github.com/scylladb/scylla/issues/1813#issuecomment-258663630","issue_url":"https://api.github.com/repos/scylladb/scylla/issues/1813","id":258663630,"user":{"login":"dorlaor","id":1735237,"avatar_url":"https://avatars.githubusercontent.com/u/1735237?v=3","gravatar_id":"","url":"https://api.github.com/users/dorlaor","html_url":"https://github.com/dorlaor","followers_url":"https://api.github.com/users/dorlaor/followers","following_url":"https://api.github.com/users/dorlaor/following{/other_user}","gists_url":"https://api.github.com/users/dorlaor/gists{/gist_id}","starred_url":"https://api.github.com/users/dorlaor/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dorlaor/subscriptions","organizations_url":"https://api.github.com/users/dorlaor/orgs","repos_url":"https://api.github.com/users/dorlaor/repos","events_url":"https://api.github.com/users/dorlaor/events{/privacy}","received_events_url":"https://api.github.com/users/dorlaor/received_events","type":"User","site_admin":false},"created_at":"2016-11-06T06:41:41Z","updated_at":"2016-11-06T06:41:41Z","body":"@elcallio @amnonh please follow up"}}
{"actor":{"display_login":"dorlaor"}}