Closed Envek closed 1 year ago
Skipping certificate validation for encrypted connection to Redis is not secure as it allows for man-in-the-middle attack.
However, given how troublesome it may be to set up SSL certificates properly, sometimes it should be disabled. Hence a setting for this.
--redis_tls_verify
ANYCABLE_REDIS_TLS_VERIFY
What is the purpose of this pull request?
Skipping certificate validation for encrypted connection to Redis is not secure as it allows for man-in-the-middle attack.
However, given how troublesome it may be to set up SSL certificates properly, sometimes it should be disabled. Hence a setting for this.
What changes did you make? (overview)
--redis_tls_verifyorANYCABLE_REDIS_TLS_VERIFY)Checklist