Skip to content

[NEW] Replica TLS certificate #7946

@mvasi90

Description

@mvasi90

The problem/use-case that the feature addresses

Currently replication is not working with right Public Key Infrastructure (in my case with Subordinate CA) because the config file does not have any option to specify the client certificate and key.

Description of the feature

An option to specify the client certificate and the client key (tls-client-cert-file and tls-client-key-file).

Additional information

Without it, the sentinel changes the Redis instance between master and replica and fails to connect without the client certificate/key (that acts as a client certificate, not server certificate).

Note: This issue is strictly related to the DNS inssue: #7928.
For two way TLS authentication, valid domain name is needed. (SAN field in X509.v3)

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions