AWS keyspaces documentation change
Summary
Updated references to SSL/TLS certificate from 'sf-class2-root.crt' to 'keyspaces-bundle.pem', removed direct download commands for Starfield certificate, and added links to TLS configuration documentation.
Security assessment
The changes standardize references to the correct TLS certificate bundle and remove outdated manual certificate download steps, directing users to updated documentation. While this improves clarity and ensures proper TLS configuration, there is no explicit mention of a security vulnerability being addressed. The updates reinforce secure practices but do not indicate a specific security incident.
Diff
diff --git a/keyspaces/latest/devguide/troubleshooting.connecting.md b/keyspaces/latest/devguide/troubleshooting.connecting.md index b08f09d72..cd73a745b 100644 --- a//keyspaces/latest/devguide/troubleshooting.connecting.md +++ b//keyspaces/latest/devguide/troubleshooting.connecting.md @@ -92 +92 @@ In this case, the path to the SSL/TLS certificate is missing, which results in t -To resolve this issue, add the path to the certfile on your computer. +To resolve this issue, add the path to the certfile on your computer. For more information, see [How to manually configure cqlsh connections for TLS](./programmatic.cqlsh.html#encrypt_using_tls). @@ -95 +95 @@ To resolve this issue, add the path to the certfile on your computer. - certfile = path_to_file/sf-class2-root.crt + certfile = path_to_file/keyspaces-bundle.pem @@ -109 +109 @@ This might be the case if the path to the certificate file on your computer is w - certfile = /root/wrong_path/sf-class2-root.crt + certfile = /root/wrong_path/keyspaces-bundle.pem @@ -118 +118 @@ This might be the case if the path to the certificate file on your computer is w -To resolve this issue, verify that the path to the certfile on your computer is correct. +To resolve this issue, verify that the path to the certfile on your computer is correct. For more information, see [How to manually configure cqlsh connections for TLS](./programmatic.cqlsh.html#encrypt_using_tls). @@ -122 +122 @@ To resolve this issue, verify that the path to the certfile on your computer is -This might be the case if the SSL/TLS certificate file `sf-class2-root.crt` is not valid, which results in the following error. +This might be the case if the SSL/TLS certificate `pem` file is not valid, which results in the following error. @@ -129,4 +129 @@ This might be the case if the SSL/TLS certificate file `sf-class2-root.crt` is n -To resolve this issue, download the Starfield digital certificate using the following command. Save `sf-class2-root.crt` locally or in your home directory. - - - curl https://certs.secureserver.net/repository/sf-class2-root.crt -O +To resolve this issue make sure that you downloaded the required digital certificates. For more information, see [How to manually configure cqlsh connections for TLS](./programmatic.cqlsh.html#encrypt_using_tls). @@ -136 +133 @@ To resolve this issue, download the Starfield digital certificate using the foll -This might be the case if the SSL/TLS certificate file `sf-class2-root.crt` is empty, which results in the following error. +This might be the case if the SSL/TLS certificate `pem` file is empty, which results in the following error. @@ -143,4 +140 @@ This might be the case if the SSL/TLS certificate file `sf-class2-root.crt` is e -To resolve this issue, download the Starfield digital certificate using the following command. Save `sf-class2-root.crt` locally or in your home directory. - - - curl https://certs.secureserver.net/repository/sf-class2-root.crt -O +To resolve this issue make sure that you downloaded the required digital certificates. You can confirm this using the steps in the following topic [How to manually configure cqlsh connections for TLS](./programmatic.cqlsh.html#encrypt_using_tls). @@ -155,4 +149 @@ This might be the case if the SSL/TLS certificate file could not be verified, wh -To resolve this issue, download the certificate file again using the following command. Save `sf-class2-root.crt` locally or in your home directory. - - - curl https://certs.secureserver.net/repository/sf-class2-root.crt -O +To resolve this issue make sure that you downloaded the required digital certificates. You can confirm this using the steps in the following topic [How to manually configure cqlsh connections for TLS](./programmatic.cqlsh.html#encrypt_using_tls).