[GEODE-9542] Enable SSL Client Certificate Authorization for Redis

• Type: New Feature
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.15.0
• Component/s: redis
• Labels: pull-request-available redis
• Assignee: Jens Deppe
• Reporter: Wayne
• Created: 24/Aug/21 20:33
• Updated: 22/Jun/22 20:45
• Resolved: 14/Sep/21 15:45

Description

When the ssl-require-authentication Geode property is set to true, we should validate the Redis client's certificate against the configured ssl-truststore to ensure that the client certificate is issued by a trusted Certificate Authority.

 

Acceptance Criteria

Client certificates issued by trusted Certificate Authorities are properly authenticated.  Client certificates issued by non-trusted Certificate Authorities are not authenticated.  When the Geode property ssl-require-authentication is set to false, no client certificate authentication is performed.

Appropriate tests are developed to ensure this feature works as expected and does not regress.

 

Issue Links

• links to: GitHub Pull Request #6826