Chris LuandGitHub f18ad39142 filer: honor the documented TLS options in every redis store (#10425) ...

The scaffold advertises enable_tls, ca_cert_path, client_cert_path and
client_key_path under redis2, redis2_sentinel and redis_cluster2, but only the
plain redis2 and redis3 stores ever read them, and under a different name,
enable_mtls. Sentinel and cluster setups quietly connected in plaintext.

Build the TLS config in one place and use it from all six stores. enable_mtls
still works. The CA and the client key pair are optional now, so enable_tls
alone verifies against the system roots, and ServerName is left unset so
go-redis validates each address the sentinel and cluster clients dial.

2026-07-24 10:26:38 -07:00

..

redis_tls_test.go

filer: honor the documented TLS options in every redis store (#10425)

2026-07-24 10:26:38 -07:00

redis_tls.go

filer: honor the documented TLS options in every redis store (#10425)

2026-07-24 10:26:38 -07:00