apache/cassandra · error · ConfigurationException

'Failed to read keystore password from the

Error message

'Failed to read keystore password from the %s for %s

What it means

In resolvePassword, reading the keystore password file failed: the file is empty or a RuntimeException occurred while reading its first line. The code throws ConfigurationException('Failed to read keystore password from the %s for %s') so TLS setup fails with a clear config error instead of a null/blank password.

Solutions

1. Fix file permissions/ownership so the password file is readable by the Cassandra process
2. Verify the file's first line contains the password and re-create the file if corrupt

When it happens

Trigger: Thrown at src/java/org/apache/cassandra/security/FileBasedSslContextFactory.java:333 when the library encounters an invalid state.

Common situations: See trigger scenarios.

AI-assisted analysis of apache/cassandra@88fd0f6a0e (2026-09-10). Data as JSON: /api/errors/7f6b72e7fed94bf4. Report an issue: GitHub.

Appendix: source

Thrown at src/java/org/apache/cassandra/security/FileBasedSslContextFactory.java:333

            if (!keystorePasswordFile.exists())
            {
                final String msg = format("keystore password file %s does not exist", keystorePasswordFile.path());
                throw new ConfigurationException(msg);
            }

            try
            {
                // we expect a password to be on the first line
                List<String> lines = FileUtils.readLines(keystorePasswordFile);
                if (lines.isEmpty())
                    return "";

                return lines.get(0);
            }
            catch (RuntimeException e)
            {
                throw new ConfigurationException(format("'Failed to read keystore password from the %s for %s",
                                                        keystorePasswordFile, keystoreFilePath),
                                                 e);
            }
        }
    }
}

View on GitHub (pinned to 88fd0f6a0e)