redis - add REDIS_SSL_VERIFY setting

bunkerity · Jan 16, 2024 · f38f775 · f38f775
1 parent 5545094
commit f38f775
Show file tree

Hide file tree

Showing 3 changed files with 13 additions and 0 deletions.
diff --git a/src/bw/lua/bunkerweb/clusterstore.lua b/src/bw/lua/bunkerweb/clusterstore.lua
@@ -25,6 +25,7 @@ function clusterstore:initialize(pool)
 		["REDIS_PORT"] = "",
 		["REDIS_DATABASE"] = "",
 		["REDIS_SSL"] = "",
+		["REDIS_SSL_VERIFY"] = "",
 		["REDIS_TIMEOUT"] = "",
 		["REDIS_KEEPALIVE_IDLE"] = "",
 		["REDIS_KEEPALIVE_POOL"] = "",
@@ -57,6 +58,7 @@ function clusterstore:initialize(pool)
 		keepalive_poolsize = tonumber(self.variables["REDIS_KEEPALIVE_POOL"]),
 		connection_options = {
 			ssl = self.variables["REDIS_SSL"] == "yes",
+			ssl_verify = self.variables["REDIS_SSL_VERIFY"] == "yes",
 		},
 		host = self.variables["REDIS_HOST"],
 		port = tonumber(self.variables["REDIS_PORT"]),

diff --git a/src/common/core/redis/plugin.json b/src/common/core/redis/plugin.json
@@ -50,6 +50,15 @@
       "regex": "^(yes|no)$",
       "type": "check"
     },
+    "REDIS_SSL_VERIFY": {
+      "context": "global",
+      "default": "no",
+      "help": "Verify the certificate of Redis server.",
+      "id": "redis-ssl-verify",
+      "label": "Redis SSL/TLS verify",
+      "regex": "^(yes|no)$",
+      "type": "check"
+    },
     "REDIS_TIMEOUT": {
       "context": "global",
       "default": "1000",

diff --git a/src/common/core/sessions/sessions.lua b/src/common/core/sessions/sessions.lua
@@ -58,6 +58,7 @@ function sessions:init()
 		["REDIS_PORT"] = "",
 		["REDIS_DATABASE"] = "",
 		["REDIS_SSL"] = "",
+		["REDIS_SSL_VERIFY"] = "",
 		["REDIS_TIMEOUT"] = "",
 		["REDIS_KEEPALIVE_IDLE"] = "",
 		["REDIS_KEEPALIVE_POOL"] = "",
@@ -124,6 +125,7 @@ function sessions:init()
 			pool = "bw-redis",
 			pool_size = tonumber(redis_vars["REDIS_KEEPALIVE_POOL"]),
 			ssl = redis_vars["REDIS_SSL"] == "yes",
+			ssl_verify = redis_vars["REDIS_SSL_VERIFY"] == "yes",
 			database = tonumber(redis_vars["REDIS_DATABASE"]),
 		}
 		if redis_vars["REDIS_SENTINEL_HOSTS"] ~= nil then