Skip to content

Support passing client certificate chain in TLS handshake with Redis server #197

Closed
@rturner3

Description

@rturner3

It is currently not possible to benchmark a cluster that has TLS enabled where the memtier's client certificate is signed by an intermediate CA. The tool has a config flag --cert, but it only reads in a single certificate, not a chain of certificates including the intermediate CAs required for the Redis server to verify the client certificate back to a trusted CA certificate.

It appears that this might be fixable by exchanging the usage of the OpenSSL function SSL_CTX_use_certificate_file() from here with SSL_CTX_use_certificate_chain_file(), see OpenSSL documentation: https://www.openssl.org/docs/man1.0.2/man3/SSL_CTX_use_certificate_file.html

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions