HTTPS for Redis

TLS configuration for Redis

The following settings are required to enable TLS for Redis.

Parameter name	Description
password	Specifies the password used for Redis server authentication.
username	Specifies the username used for Redis server authentication.
verifyPeer	Determines whether to verify the peer's certificate of SSL/TLS connections to ElasticSearch for enhanced security. By default, this option is set to true.
truststorePath	Specifies the path to the truststore file, which will contain the Redis server certificate.
truststorePassword	Specifies the password to the truststore file.

Example setting:

# Redis Settings 
spring:
  data:
    redis:
      ssl:
        enabled: ${REDIS.TLS:false}
      password: ${REDIS.PASSWORD:}
      username: <password>
      tls:
        trustStorePath: ${REDIS.TRUSTSTORE.PATH:}
        trustStorePassword: ${REDIS.TRUSTSTORE.PASSWORD:}
        verifyPeer: ${REDIS.VERIFY.PEER:true}

Alternatively, you can set the following environment variables:

• REDIS_TLS
• REDIS_PASSWORD
• REDIS_TRUSTSTORE_PATH
• REDIS_TRUSTSTORE_PASSWORD
• REDIS_VERIFY_PEER

Mutual TLS configuration

In addition to the above TLS configuration, the following settings are required to enable mutual TLS (mTLS) between the GWS application and the Redis server.

Parameter name	Description
keystorePath	Specifies the path to the keystore file that contains the host certificate, which is sent to the Redis Server.
keystorePassword	Specifies the password to the keystore file.
KeyAlias	Specifies the alias (or name) under which the key is stored in the keystore.

Example setting:

spring:
  data:
    redis:
      tls:
        keystorePath:/path/to/jksStorage.jks
        keystorePassword: password
        keyAlias: instance