Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

BE cannot use one-way SSL with Redis Store. #14

Open
tsaxena18 opened this issue Jan 22, 2021 · 3 comments
Open

BE cannot use one-way SSL with Redis Store. #14

tsaxena18 opened this issue Jan 22, 2021 · 3 comments
Assignees

Comments

@tsaxena18
Copy link
Collaborator

Version Information

Software Version(s)
BusinessEvents 6.1.0
OS Type? Linux

What is the expected behavior?

The Redis server should be configurable with one-way ssl.

What is the actual behavior?

It is not working as per steps mentioned in Redis documentation (https://redis.io/topics/encryption).
It seems that currently BE can only use two-way SSL with Redis.

Please provide a unit test that demonstrates the bug.

  1. Start Redis server with SSL certifictes and pass parameter 'tls-auth-clients no' in the command as shown below :
    redis-server --tls-port 6379 --port 0 --tls-cert-file ./tests/tls/redis.crt --tls-key-file ./tests/tls/redis.key --tls-ca-cert-file ./tests/tls/ca.crt --loadmodule redisearch.so
  2. Start Redis-cli with wrong cert or key ---> The cert/key should be ignored and connection should be fine but here redis-cli fails to connect as shown below :
    redis-cli --tls --cert ./tests/tls/redis2.crt --key ./tests/tls/redis.key --cacert ./tests/tls/ca.crt
    Could not negotiate a TLS connection: Invalid client certificate

Other notes on how to reproduce the issue?

redis/redis#7437

Refer this for more info ---> https://github.com/bitnami/bitnami-docker-redis-cluster/issues/5

@kagrawal-tibco
Copy link
Collaborator

Redis Currently don't support one way SSL/TLS in it''s stable build/current version. We can include it when it is available in the stable build.

@vpatil-tibco
Copy link
Collaborator

@kagrawal-tibco Provide a reference link to the issue which outlines this instability around Redis 1-way SSL.

@kagrawal-tibco
Copy link
Collaborator

Reference : Redis Currently does not support One way SSL as it does not ignore client certificate if 'tls-auth-clients no'
redis/redis#7437
redis/redis#7457 : Suggest solution is in redis:unstable

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants