Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add TLS support #260

Merged
merged 1 commit into from
Mar 12, 2021
Merged

Add TLS support #260

merged 1 commit into from
Mar 12, 2021

Conversation

loliee
Copy link
Contributor

@loliee loliee commented Mar 7, 2021

Thanks for this nice role !

This allow to compile Redis with TLS support.

Strict TLS config example with explicit setup (setting redis_port to 0 to force TLS connections make configuration confusing):

redis_version: 6.2.1
redis_port: 0
redis_service_name: redis
redis_make_tls: yes
redis_config_file_name: 6379.conf
redis_install_dir: /opt/redis
redis_logfile: /var/log/redis_6379.log
redis_dir: /var/lib/redis/6379
redis_pidfile: /var/run/redis/6379.pid

redis_config_additional: |
  tls-port 6379
  tls-cert-file /etc/ssl/redis/cert.crt
  tls-key-file /etc/ssl/redis/key.pem
  tls-ca-cert-file /etc/ssl/redis/ca.crt

This allow to compile Redis with TLS support.
C.f https://redis.io/topics/encryption

Strict TLS config example (setting `redis_port` to `0` to force TLS connections are not explicit):

```
redis_version: 6.2.1
redis_port: 0
redis_service_name: redis
redis_make_tls: yes
redis_config_file_name: 6379.conf
redis_install_dir: /opt/redis
redis_logfile: /var/log/redis_6379.log
redis_dir: /var/lib/redis/6379
redis_pidfile: /var/run/redis/6379.pid

redis_config_additional: |
  tls-port 6379
  tls-cert-file /etc/ssl/redis/cert.crt
  tls-key-file /etc/ssl/redis/key.pem
  tls-ca-cert-file /etc/ssl/redis/ca.crt
```
@loliee loliee force-pushed the add-tls-support branch from efd2e39 to 1035497 Compare March 7, 2021 17:58
@DavidWittman
Copy link
Owner

This is great... thanks @loliee!

@DavidWittman DavidWittman merged commit b7f0612 into DavidWittman:master Mar 12, 2021
@loliee loliee deleted the add-tls-support branch March 25, 2021 21:20
rndmh3ro pushed a commit to telekom-mms/ansible-redis that referenced this pull request Aug 9, 2021
This allow to compile Redis with TLS support.
C.f https://redis.io/topics/encryption

Strict TLS config example (setting `redis_port` to `0` to force TLS connections are not explicit):

```
redis_version: 6.2.1
redis_port: 0
redis_service_name: redis
redis_make_tls: yes
redis_config_file_name: 6379.conf
redis_install_dir: /opt/redis
redis_logfile: /var/log/redis_6379.log
redis_dir: /var/lib/redis/6379
redis_pidfile: /var/run/redis/6379.pid

redis_config_additional: |
  tls-port 6379
  tls-cert-file /etc/ssl/redis/cert.crt
  tls-key-file /etc/ssl/redis/key.pem
  tls-ca-cert-file /etc/ssl/redis/ca.crt
```
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants