Skip to content

Fork of the Redis memory cache that includes built-in support for SSL (built on the openSSL library). I did this originally for Triton Media, but all updates will be done here. Contains branches for 2.4, 2.6, 2.8, and the 3.0 branch of antirez/redis. This is a work-in-progress. Please report any issues or problems you may find, and I'll fix them…

License

Notifications You must be signed in to change notification settings

bbroerman30/ssl-redis

 
 

Repository files navigation

SSL-Redis
-----------------------
This project is a fork of the 3.0.6 stable version of Redis by antirez to enable native
SSL communications with clients and slaves.  

NOTE: I am still in the middle of merging SSL changes into this branch. It is by no means ready for use.
When ready, I will remove this note...

If you want to use ssl-redis from PHP, I suggest you use my fork of nicholasfs' phpredis called ssl-phpredis

Changes in this fork are copyright 2012 Triton Digital Media, and 
released to the public domain as open source under the BSD license. 
All other portions of this codebase remain copyright Salvatore Sanfilippo and
other contributors, as listed in the code.

The original source is: https://github.com/antirez/redis
The home website fo redis is: http://redis.io/


This is a work-in-progress. I will be making updates as I test, find bugs, or other issues.
If you find bugs, or have isues, please contact me at bbroerman@bbroerman.net


To enable SSL on redis-server, add these lines to the redis.config:
ssl true
ssl_ca_root_dir < Path to your openSSL root certificates directory >
ssl_ca_root_file < Path to your openSSL root certificate file (You must specify either a root CA file, or a directory, but not both) >
ssl_cert_file <Path to your server's SSL cert>
ssl_pk_file <Path to your server's private key file (may be the same as above)>
ssl_dhk_file <Path to your Diffie-Hellman data file>

If you will be using slave servers, and want them to validate the common name in the certificate of the master server, you can add the option:
ssl_cert_common_name <common name to match>


To enable SSL on redis-client:
./redis-cli -h <optional host> -p <optional port> -ssl 

to specify a Root Certificate Authority file or directory, you should use:
    -cadir  <optional path to the openSSL root certificate directory>
    -cafile <optional path to the openSSL root certificate file>
    
You should specify a file, or a path, but not both. If neither are specified, it will default to the directory /etc/ssl/certs


Where to find complete Redis documentation?
-------------------------------------------

This README is just a fast "quick start" document. You can find more detailed
documentation at http://redis.io

Building Redis
--------------

Redis can be compiled and used on Linux, OSX, OpenBSD, NetBSD, FreeBSD.
We support big endian and little endian architectures.

It may compile on Solaris derived systems (for instance SmartOS) but our
support for this platform is "best effort" and Redis is not guaranteed to
work as well as in Linux, OSX, and *BSD there.

It is as simple as:

    % make

You can run a 32 bit Redis binary using:

    % make 32bit

After building Redis is a good idea to test it, using:

    % make test

Fixing build problems with dependencies or cached build options
—--------
Redis has some dependencies which are included into the "deps" directory.
"make" does not rebuild dependencies automatically, even if something in the
source code of dependencies is changes.

When you update the source code with `git pull` or when code inside the
dependencies tree is modified in any other way, make sure to use the following
command in order to really clean everything and rebuild from scratch:

    make distclean

This will clean: jemalloc, lua, hiredis, linenoise.

Also if you force certain build options like 32bit target, no C compiler
optimizations (for debugging purposes), and other similar build time options,
those options are cached indefinitely until you issue a "make distclean"
command.

Fixing problems building 32 bit binaries
---------

If after building Redis with a 32 bit target you need to rebuild it
with a 64 bit target, or the other way around, you need to perform a
"make distclean" in the root directory of the Redis distribution.

In case of build errors when trying to build a 32 bit binary of Redis, try
the following steps:

* Install the packages libc6-dev-i386 (also try g++-multilib).
* Try using the following command line instead of "make 32bit":

    make CFLAGS="-m32 -march=native" LDFLAGS="-m32"

Allocator
---------

Selecting a non-default memory allocator when building Redis is done by setting
the `MALLOC` environment variable. Redis is compiled and linked against libc
malloc by default, with the exception of jemalloc being the default on Linux
systems. This default was picked because jemalloc has proven to have fewer
fragmentation problems than libc malloc.

To force compiling against libc malloc, use:

    % make MALLOC=libc

To compile against jemalloc on Mac OS X systems, use:

    % make MALLOC=jemalloc

Verbose build
-------------

Redis will build with a user friendly colorized output by default.
If you want to see a more verbose output use the following:

    % make V=1

Running Redis
-------------

To run Redis with the default configuration just type:

    % cd src
    % ./redis-server
    
If you want to provide your redis.conf, you have to run it using an additional
parameter (the path of the configuration file):

    % cd src
    % ./redis-server /path/to/redis.conf

It is possible to alter the Redis configuration passing parameters directly
as options using the command line. Examples:

    % ./redis-server --port 9999 --slaveof 127.0.0.1 6379
    % ./redis-server /etc/redis/6379.conf --loglevel debug

All the options in redis.conf are also supported as options using the command
line, with exactly the same name.

Playing with Redis
------------------

You can use redis-cli to play with Redis. Start a redis-server instance,
then in another terminal try the following:

    % cd src
    % ./redis-cli
    redis> ping
    PONG
    redis> set foo bar
    OK
    redis> get foo
    "bar"
    redis> incr mycounter
    (integer) 1
    redis> incr mycounter
    (integer) 2
    redis> 

You can find the list of all the available commands here:

    http://redis.io/commands

Installing Redis
-----------------

In order to install Redis binaries into /usr/local/bin just use:

    % make install

You can use "make PREFIX=/some/other/directory install" if you wish to use a
different destination.

Make install will just install binaries in your system, but will not configure
init scripts and configuration files in the appropriate place. This is not
needed if you want just to play a bit with Redis, but if you are installing
it the proper way for a production system, we have a script doing this
for Ubuntu and Debian systems:

    % cd utils
    % ./install_server.sh

The script will ask you a few questions and will setup everything you need
to run Redis properly as a background daemon that will start again on
system reboots.

You'll be able to stop and start Redis using the script named
/etc/init.d/redis_<portnumber>, for instance /etc/init.d/redis_6379.

Code contributions
---

Note: by contributing code to the Redis project in any form, including sending
a pull request via Github, a code fragment or patch via private email or
public discussion groups, you agree to release your code under the terms
of the BSD license that you can find in the COPYING file included in the Redis
source distribution.

Please see the CONTRIBUTING file in this source distribution for more
information.

Enjoy!

About

Fork of the Redis memory cache that includes built-in support for SSL (built on the openSSL library). I did this originally for Triton Media, but all updates will be done here. Contains branches for 2.4, 2.6, 2.8, and the 3.0 branch of antirez/redis. This is a work-in-progress. Please report any issues or problems you may find, and I'll fix them…

Resources

License

Stars

Watchers

Forks

Packages

No packages published

Languages

  • C 80.1%
  • Tcl 16.4%
  • Ruby 2.6%
  • Other 0.9%