Support for SSL

[gmurt]

I'd like to make use of the AWS new REDIS Serverless offering but these require SSL.

Are there any plans to add SSL back in to this library? I notice the older branch did have SSL support but this doesn't seem to be present in the most recent Master branch.

Kind regards,
Graham

[Zhou171542036]

来信已收到。

[madmat777]

Just wanted to add a comment here as I spent way too long trying to get this to work with Indy SSL. Bottom line is that I could not get this to work using the standard Indy components.

You will need to install the version of Indy from eSeGeCe that has all the updated support for the latest SSL protocols. https://www.esegece.com/products/sgcindy - it's a free download (no source unless you pay).

Rename your current Indy library and use this in place. It uses the same unit names so everything just works (note I do not use VCLs - if you are using visual components you may need to install them again). I did have a couple of files that I needed to copy across but it was a painless replacement for Indy.

The changes you need to make are all in Redis.NetLib.INDY (I guess this could be saved as Redis.NetLib.INDYSSL), but I just wanted it to work.

Add to the private declaration
m_SSL : TIdSSLIOHandlerSocketOpenSSL;

Update the constructor and destructor as follows

begin
  inherited;

  FTCPClient := TIdTCPClient.Create;

  m_SSL := TIdSSLIOHandlerSocketOpenSSL.Create(nil);
  m_SSL.SSLOptions.APIVersion := sslvAPI_1_1;
  m_SSL.SSLOptions.Method := sslvTLSv1_2;
  m_SSL.SSLOptions.Mode := sslmClient;

  // for AWS ElastiCache,  set the RootCertFile instead of the CertFile and use the AmazonRootCA1.pem 
  m_SSL.SSLOptions.CertFile := {your cert file};
  m_SSL.PassThrough := False;

  FTCPClient.IOHandler := M_SSL;
end;

destructor TRedisTCPLibINDY.Destroy;
begin
  m_SSL.Free;
  FTCPClient.Free;
  inherited;
end;

Hope that helps. I still have more to do with this but if you need Redis via a SSL connection, this will put you on the right path.

[Basti-Fantasti]

Maybe you can also use the awesome free and fully open source TaurusTLS library Link from @JPeterMugaas

[Zhou171542036]

来信已收到。

[danieleteti]

ASAP I'll implement the TLS support using Taurus