How do I configure a TLS-enabled Redis Software cluster to only accept TLS1.2 traffic?

Question

How do I configure a TLS-enabled Redis Software cluster to only accept TLS1.2 traffic?

Answer

You can run the following two commands to set the minimum TLS to 1.2 in both the data path and the control path.

rladmin cluster config min_data_TLS_version 1.2
rladmin cluster config min_control_TLS_version 1.2

To get the current TLS version on the server, you can run the following API call and look for the two properties - min_data_TLS_version and min_control_TLS_version.

GET https://<Cluster_FQDN>:9443/v1/cluster

For testing, there is no rladmin command to verify the TLS version connectivity. However, you can use the below OpenSSL command to test it.

# For TLS 1.0
openssl s_client -connect <Server IP address>:8443 -tls1
# For TLS 1.1
openssl s_client -connect <Server IP address>:8443 -tls1_1 
# For TLS 1.2
openssl s_client -connect <Server IP address>:8443 -tls1_2