1. 12 Dec, 2022 1 commit
  2. 27 Apr, 2022 1 commit
    • Yossi Gottlieb's avatar
      Fix OpenSSL 3.0.x related issues. (#10291) · ec06e933
      Yossi Gottlieb authored
      * Drop obsolete initialization calls.
      * Use decoder API for DH parameters.
      * Enable auto DH parameters if not explicitly used, which should be the
        preferred configuration going forward.
      
      (cherry picked from commit 3881f785)
      ec06e933
  3. 04 Oct, 2021 1 commit
  4. 21 Jul, 2021 1 commit
  5. 22 Mar, 2021 1 commit
  6. 03 Mar, 2021 1 commit
  7. 08 Feb, 2021 1 commit
  8. 13 Dec, 2020 1 commit
  9. 11 Dec, 2020 1 commit
    • Yossi Gottlieb's avatar
      TLS: Add different client cert support. (#8076) · 8c291b97
      Yossi Gottlieb authored
      This adds a new `tls-client-cert-file` and `tls-client-key-file`
      configuration directives which make it possible to use different
      certificates for the TLS-server and TLS-client functions of Redis.
      
      This is an optional directive. If it is not specified the `tls-cert-file`
      and `tls-key-file` directives are used for TLS client functions as well.
      
      Also, `utils/gen-test-certs.sh` now creates additional server-only and client-only certs and will skip intensive operations if target files already exist.
      8c291b97
  10. 07 Dec, 2020 1 commit
  11. 11 Oct, 2020 1 commit
  12. 29 Sep, 2020 1 commit
    • Yossi Gottlieb's avatar
      TLS: Do not require CA config if not used. (#7862) · 1591e347
      Yossi Gottlieb authored
      The tls-ca-cert or tls-ca-cert-dir configuration parameters are only
      used when Redis needs to authenticate peer certificates, in one of these
      scenarios:
      
      1. Incoming clients or replicas, with `tls-auth-clients` enabled.
      2. A replica authenticating the master's peer certificate.
      3. Cluster nodes authenticating other nodes when establishing the bus
         protocol connection.
      1591e347
  13. 23 Sep, 2020 1 commit
  14. 22 Sep, 2020 1 commit
  15. 17 Aug, 2020 1 commit
  16. 28 Jul, 2020 2 commits
  17. 10 Jul, 2020 2 commits
  18. 27 May, 2020 1 commit
  19. 14 May, 2020 1 commit
  20. 10 May, 2020 1 commit
  21. 22 Apr, 2020 1 commit
  22. 20 Apr, 2020 1 commit
  23. 08 Oct, 2019 1 commit
    • Yossi Gottlieb's avatar
      TLS: Improve CA certifiate configuration options. · d7f2681a
      Yossi Gottlieb authored
      This adds support for explicit configuration of a CA certs directory (in
      addition to the previously supported bundle file).  For redis-cli, if no
      explicit CA configuration is supplied the system-wide default
      configuration will be adopted.
      d7f2681a
  24. 07 Oct, 2019 4 commits
    • Yossi Gottlieb's avatar
      TLS: Configuration options. · 61733ded
      Yossi Gottlieb authored
      Add configuration options for TLS protocol versions, ciphers/cipher
      suites selection, etc.
      61733ded
    • Oran Agra's avatar
      TLS: Implement support for write barrier. · 6b629480
      Oran Agra authored
      6b629480
    • Oran Agra's avatar
      diskless replication rdb transfer uses pipe, and writes to sockets form the parent process. · 5a477946
      Oran Agra authored
      misc:
      - handle SSL_has_pending by iterating though these in beforeSleep, and setting timeout of 0 to aeProcessEvents
      - fix issue with epoll signaling EPOLLHUP and EPOLLERR only to the write handlers. (needed to detect the rdb pipe was closed)
      - add key-load-delay config for testing
      - trim connShutdown which is no longer needed
      - rioFdsetWrite -> rioFdWrite - simplified since there's no longer need to write to multiple FDs
      - don't detect rdb child exited (don't call wait3) until we detect the pipe is closed
      - Cleanup bad optimization from rio.c, add another one
      5a477946
    • Yossi Gottlieb's avatar
      TLS: Connections refactoring and TLS support. · b087dd1d
      Yossi Gottlieb authored
      * Introduce a connection abstraction layer for all socket operations and
      integrate it across the code base.
      * Provide an optional TLS connections implementation based on OpenSSL.
      * Pull a newer version of hiredis with TLS support.
      * Tests, redis-cli updates for TLS support.
      b087dd1d