Skip to content

fix(cassandra): enable TLS verification [H8+L6]#556

Merged
lakhansamani merged 1 commit intomainfrom
fix/h8-cassandra-tls
Apr 4, 2026
Merged

fix(cassandra): enable TLS verification [H8+L6]#556
lakhansamani merged 1 commit intomainfrom
fix/h8-cassandra-tls

Conversation

@lakhansamani
Copy link
Copy Markdown
Contributor

Summary

  • H8 (High): TLS verification was completely disabled (InsecureSkipVerify + no host verification)
  • Now verifies server certificates and hostnames
  • L6 (Low): Query timeout reduced from 30 minutes to 30 seconds

Test plan

  • Package compiles
  • Test with Cassandra/ScyllaDB with valid TLS certificates

TLS was configured with InsecureSkipVerify: true and
EnableHostVerification: false, completely defeating TLS security.
Now properly verifies server certificates and hostnames.

Also reduces query timeout from 30 minutes to 30 seconds.

Fixes: H8 (High), L6 (Low)
@lakhansamani lakhansamani merged commit 753f3a6 into main Apr 4, 2026
@lakhansamani lakhansamani deleted the fix/h8-cassandra-tls branch April 4, 2026 06:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant