Note more clearly that the redis-cli tool needs CA root passed in explicitly via --cacert flag.
The Redis command-line client & server are somewhat unusual in that they do not trust certificates in your system trust store. We pass the flag correctly in our systemd unit, and this is mentioned in research notes, but it also seems worth mentioning in the root distribution section (like, just a sentence or two). I think this might be tricky though since this is common content that's shared between pages (I think).
It should also be clear that the Redis SDKs appear to use standard library TLS stacks and do appear to use the system trust store.
Note more clearly that the
redis-clitool needs CA root passed in explicitly via--cacertflag.The Redis command-line client & server are somewhat unusual in that they do not trust certificates in your system trust store. We pass the flag correctly in our
systemdunit, and this is mentioned in research notes, but it also seems worth mentioning in the root distribution section (like, just a sentence or two). I think this might be tricky though since this is common content that's shared between pages (I think).It should also be clear that the Redis SDKs appear to use standard library TLS stacks and do appear to use the system trust store.