Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Redis trust store #13

Open
mmalone opened this issue Sep 24, 2021 · 0 comments
Open

Redis trust store #13

mmalone opened this issue Sep 24, 2021 · 0 comments

Comments

@mmalone
Copy link

mmalone commented Sep 24, 2021

Note more clearly that the redis-cli tool needs CA root passed in explicitly via --cacert flag.

The Redis command-line client & server are somewhat unusual in that they do not trust certificates in your system trust store. We pass the flag correctly in our systemd unit, and this is mentioned in research notes, but it also seems worth mentioning in the root distribution section (like, just a sentence or two). I think this might be tricky though since this is common content that's shared between pages (I think).

It should also be clear that the Redis SDKs appear to use standard library TLS stacks and do appear to use the system trust store.

tashian pushed a commit that referenced this issue Apr 6, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant