mirror of
https://github.com/langgenius/dify-plugin-daemon.git
synced 2026-07-22 01:35:24 -04:00
Oscaner Miao
2be1f651a9
* feat(#450): add Redis SSL/TLS configuration support Add comprehensive SSL/TLS support for Redis connections with configurable certificate verification modes. Introduces new environment variables for SSL configuration including REDIS_USE_SSL, REDIS_SSL_CERT_REQS (supporting CERT_NONE, CERT_OPTIONAL, CERT_REQUIRED), and REDIS_SSL_CA_CERTS for custom CA certificates. Changes: - Add Redis SSL configuration options to .env.example - Implement RedisTLSConfig() method to build tls.Config based on environment settings - Pass TLS config to both standard Redis and Sentinel mode initializers - Support custom CA certificate loading and verification modes - Set minimum TLS version to 1.2 for security - Minor whitespace cleanup in existing config comments This enables secure Redis connections in production environments with flexible certificate verification options. * fix(#450): prevent reference cycle in TLS config and simplify SSL setup - Capture only RootCAs in VerifyConnection closure to avoid retaining entire tlsConf and potential reference cycles - Remove redundant nil checks for tlsConf in Redis client initialization since tlsConf is guaranteed to be non-nil when useSsl is true - Update comments to reflect actual behavior and constraints * fix(#450): improve Redis TLS certificate verification logic for optional certificates * fix(#450): simplify Redis TLS certificate verification logic for optional and required certificates * docs(#450): add note for CA certificate file path in Redis SSL configuration * test(#450): add comprehensive tests for Redis TLS configuration * fix(#450): enhance Redis SSL configuration documentation and enforce CA cert requirement * fix(#450): add nil TLS parameter to InitRedisClient calls in tests Update all InitRedisClient function calls across test files to include the new nil parameter for TLS configuration. This change maintains backward compatibility by explicitly passing nil for TLS settings in non-TLS test scenarios. * fix(#450): add default TLS configuration for Redis client when no tlsConf is provided