title: Using cqlsh with ssl
body: <p>I have enabled ssl encryption in my cassandra node and I am trying to figure out how to connect to my node using cqlsh with ssl:</p>
  
  <p>When I run <code>./cqlsh --ssl</code> I get the following error:</p>
  
  <pre><code>Validation is enabled; SSL transport factory requires a valid certfile to be specified. Please provide path to the certfile in [ssl] section as 'certfile' option in /root/.cassandra/cqlshrc (or use [certfiles] section) or set SSL_CERTFILE environment variable.
  </code></pre>
  
  <p>I followed the link on <a href="https://docs.datastax.com/en/cassandra/2.1/cassandra/security/secureCqlshSSL_t.html" rel="nofollow">https://docs.datastax.com/en/cassandra/2.1/cassandra/security/secureCqlshSSL_t.html</a>:</p>
  
  <pre><code>[authentication]
  username = fred
  password = !!bang!!$
  </code></pre>
  
  <p>I am keeping in the root folder so that any user can login and can access the common folder (rather than in my user directory).  However what would be the password in this case?  Do I need to put my password?!</p>
  
  <pre><code>certfile = ~/keys/node0.cer.pem
  </code></pre>
  
  <p>Will  I need to add this certfile to the cassandra's truststore, or can I just add cassandra nodes certificate itself?</p>
  
  <p>I am using Cassandra 2.2.7.</p>