options.yaml

#
server_encryption_options:
  internode_encryption: all
  keystore: conf/server-keystore.jks   
  keystore_password: awesomekeypass
  truststore: conf/server-truststore.jks
  truststore_password: truststorepass
  protocol: TLS
  algorithm: SunX509
  store_type: JKS
  cipher_suites: [TLS_RSA_WITH_AES_256_CBC_SHA]
  require_client_auth: true

# enable or disable client/server encryption.  
client_encryption_options:
  enabled: false
  keystore: conf/client-keystore.jks
  keystore_password: clientkeypass
  require_client_auth: true
  truststore: conf/client-truststore.jks
  truststore_password: clienttrustpass
  protocol: TLS
  algorithm: SunX509
  store_type: JKS
  cipher_suites: [TLS_RSA_WITH_AES_256_CBC_SHA]