Skip to content

JohnSully/modssl

Repository files navigation

modssl An SSL Module for Redis and KeyDB

modssl is a demonstration of SSL support wrapped in a module. Because Redis' module API is not quite powerful enough to support this it relies upon hot patching to replicate the missing APIs. The goal of this project is to promote encryption and encourage expansion to the Redis module API.

modssl is based upon a PR by madolson for adding SSL support to Redis.

Checkout and Compile

Compiling modssl requires the sources for the version of Redis or KeyDB which you intend to use it with. Because modssl integrates more tightly than a regular module it may only be used with the exact version it was compiled with.

First clone the repo (and submodules):

git clone --recurse-submodules https://github.com/JohnSully/modssl.git 

For Redis:

make REDIS_SRC=/path/to/redis/src

For KeyDB:

make REDIS_SRC=/path/to/redis/src KEYDB=1

Running

Running modssl requires a certificate similar to what you would use with an HTTPS website. For convenience a test certificate has been generated in the testcert folder. You should generate your own before using modssl in production.

modssl is launched like any other module. It requires 3 parameters: The certificate, the key, and the dh_params file. For more information on generating these files see SSL_README from the original patch

./keydb-server --loadmodule ~/repos/modssl/modssl.so \ 
    ~/repos/modssl/testcert/server.crt \
    ~/repos/modssl/testcert/server.key \
    ~/repos/modssl/testcert/dh_params.dh 

SSL Client

The redis-cli client does not natively support SSL. madolson has created a version in her repo which you can fetch here: https://github.com/madolson/redis/tree/dev-unstable-ssl-original

In order to compile this version follow the instructions here: https://github.com/madolson/redis/blob/dev-unstable-ssl-original/SSL_README.md

Once you have a client with SSL support built you can launch it with:

./redis-cli --ssl

About

An SSL Module for Redis and KeyDB

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published