Skip to content

Fix: ANYCABLE_REDIS_TLS_CA_CERT_PATH config option ignored - #7

Open
ptzn wants to merge 1 commit into
anycable:mainfrom
ptzn:main
Open

Fix: ANYCABLE_REDIS_TLS_CA_CERT_PATH config option ignored#7
ptzn wants to merge 1 commit into
anycable:mainfrom
ptzn:main

Conversation

@ptzn

@ptzn ptzn commented May 12, 2026

Copy link
Copy Markdown

Summary

Changes

  • Actually use redis_tls_ca_cert_path config for ssl_params
  • Use :ca_file* option for OpenSSL::SSL::SSLContext#set_params instead of not used :ca_path*

Checklist

  • I've added tests for this change
  • I've added a Changelog entry
  • I've updated documentation

*see https://ruby.github.io/openssl/OpenSSL/SSL/SSLContext.html#attribute-i-ca_file

  • ca_file: The path to a file containing a PEM-format CA certificate
  • ca_path: The path to a directory containing CA certificates in PEM format.

- redis_tls_ca_cert_path is read in #to_redis_params but never assigned (ssl_params[:ca_path] if ca_path)
- Use :ca_file* option for OpenSSL::SSL::SSLContext#set_params instead
of not used :ca_path*

* see https://ruby.github.io/openssl/OpenSSL/SSL/SSLContext.html#attribute-i-ca_file
  ca_file: The path to a file containing a PEM-format CA certificate
  ca_path: The path to a directory containing CA certificates in PEM format.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant