-
Notifications
You must be signed in to change notification settings - Fork 24.5k
Closed
Description
The problem/use-case that the feature addresses
Currently replication is not working with right Public Key Infrastructure (in my case with Subordinate CA) because the config file does not have any option to specify the client certificate and key.
Description of the feature
An option to specify the client certificate and the client key (tls-client-cert-file and tls-client-key-file).
Additional information
Without it, the sentinel changes the Redis instance between master and replica and fails to connect without the client certificate/key (that acts as a client certificate, not server certificate).
Note: This issue is strictly related to the DNS inssue: #7928.
For two way TLS authentication, valid domain name is needed. (SAN field in X509.v3)
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels