Added option to cli to configure key and certificate for mTLS redis

privacybydesign · Jul 12, 2024 · 8b92c0a · 8b92c0a
1 parent 0551d07
commit 8b92c0a
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 0 deletions.
diff --git a/irma/cmd/keyshare-myirma.go b/irma/cmd/keyshare-myirma.go
@@ -75,6 +75,8 @@ func init() {
 	flags.Int("redis-db", 0, "database to be selected after connecting to the server (default 0)")
 	flags.String("redis-tls-cert", "", "use Redis TLS with specific certificate or certificate authority")
 	flags.String("redis-tls-cert-file", "", "use Redis TLS path to specific certificate or certificate authority")
+	flags.String("redis-tls-client-key-file", "", "use Redis mTLS with specified client key path")
+	flags.String("redis-tls-client-cert-file", "", "use Redis mTLS with specified client certificate path")
 	flags.Bool("redis-no-tls", false, "disable Redis TLS (by default, Redis TLS is enabled with the system certificate pool)")
 
 	headers["keyshare-attributes"] = "IRMA session configuration"

diff --git a/irma/cmd/keyshare-server.go b/irma/cmd/keyshare-server.go
@@ -72,6 +72,8 @@ func init() {
 	flags.Int("redis-db", 0, "database to be selected after connecting to the server (default 0)")
 	flags.String("redis-tls-cert", "", "use Redis TLS with specific certificate or certificate authority")
 	flags.String("redis-tls-cert-file", "", "use Redis TLS path to specific certificate or certificate authority")
+	flags.String("redis-tls-client-key-file", "", "use Redis mTLS with specified client path")
+	flags.String("redis-tls-client-cert-file", "", "use Redis mTLS with specified client certificate path")
 	flags.Bool("redis-no-tls", false, "disable Redis TLS (by default, Redis TLS is enabled with the system certificate pool)")
 
 	headers["jwt-privkey"] = "Cryptographic keys"

diff --git a/irma/cmd/server.go b/irma/cmd/server.go
@@ -136,6 +136,8 @@ func setFlags(cmd *cobra.Command, production bool) error {
 	flags.Int("redis-db", 0, "database to be selected after connecting to the server (default 0)")
 	flags.String("redis-tls-cert", "", "use Redis TLS with specific certificate or certificate authority")
 	flags.String("redis-tls-cert-file", "", "use Redis TLS path to specific certificate or certificate authority")
+	flags.String("redis-tls-client-key-file", "", "use Redis mTLS with specified client key path")
+	flags.String("redis-tls-client-cert-file", "", "use Redis mTLS with specified client certificate path")
 	flags.Bool("redis-no-tls", false, "disable Redis TLS (by default, Redis TLS is enabled with the system certificate pool)")
 
 	headers["jwt-issuer"] = "JWT configuration"