Using a single certificate for inter-node encryption on Cassandra

Question

I have inter-node encryption setup on a small Cassandra cluster (4 nodes), and each node has its own key pair. That means that I need to distribute a trusted keystore to all nodes that contains the public key for every other node in the cluster, which makes it a bit of a pain to update when I add nodes to the cluster.

Does Cassandra allow using a single certificate/key for all nodes in a cluster, or will it complain? All the docs I see online tell me to generate a separate key pair for each node, but does not address sharing certificates. If it is allowed, what are the drawbacks to this method?

Answer 1

Adding the CA cert to the truststore of each node is sufficient.