Memcached client TLS support

Code Issues Proposed changes

This patch specifies a set of configuration options required to build
a TLS context, which is used to wrap the client connection socket.
Closes-Bug: #1906846
Change-Id: I03a92168b90508956f367fbb60b7712f95b97f60

This commit is contained in:

Grzegorz Grasza

2020年12月04日 16:27:11 +01:00

committed by Tim Burke

parent e22cad666a

commit 6930bc24b2

6 changed files with 85 additions and 7 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

22
etc/memcache.conf-sample

View File

@@ -34,3 +34,25 @@

#

# How many errors can accumulate before a server is temporarily ignored.

# error_suppression_limit = 10

#

# (Optional) Global toggle for TLS usage when comunicating with

# the caching servers.

# tls_enabled = false

#

# (Optional) Path to a file of concatenated CA certificates in PEM

# format necessary to establish the caching server's authenticity.

# If tls_enabled is False, this option is ignored.

# tls_cafile =

#

# (Optional) Path to a single file in PEM format containing the

# client's certificate as well as any number of CA certificates

# needed to establish the certificate's authenticity. This file

# is only required when client side authentication is necessary.

# If tls_enabled is False, this option is ignored.

# tls_certfile =

#

# (Optional) Path to a single file containing the client's private

# key in. Otherwhise the private key will be taken from the file

# specified in tls_certfile. If tls_enabled is False, this option

# is ignored.

# tls_keyfile =

4
etc/proxy-server.conf-sample

View File

@@ -712,6 +712,10 @@ use = egg:swift#memcache

# How many errors can accumulate before a server is temporarily ignored.

# error_suppression_limit = 10

#

# (Optional) Global toggle for TLS usage when comunicating with

# the caching servers.

# tls_enabled =

#

# More options documented in memcache.conf-sample

[filter:ratelimit]