From 6780dbbba465db5feb41e978e6a878224b00988c Mon Sep 17 00:00:00 2001 From: Omar Trigui Date: Sat, 24 Jan 2026 00:16:52 +0100 Subject: [PATCH] Enable Redis TLS without client certificates Signed-off-by: Omar Trigui --- registry/handlers/app.go | 12 +++++++----- 1 file changed, 7 insertions(+), 5 deletions(-) diff --git a/registry/handlers/app.go b/registry/handlers/app.go index 6b4d1409e..1f2591e40 100644 --- a/registry/handlers/app.go +++ b/registry/handlers/app.go @@ -571,13 +571,15 @@ func (app *App) configureRedis(cfg *configuration.Configuration) { } // redis TLS config - if cfg.Redis.TLS.Certificate != "" || cfg.Redis.TLS.Key != "" { + if cfg.Redis.TLS.Certificate != "" || cfg.Redis.TLS.Key != "" || len(cfg.Redis.TLS.RootCAs) != 0 { var err error tlsConf := &tls.Config{} - tlsConf.Certificates = make([]tls.Certificate, 1) - tlsConf.Certificates[0], err = tls.LoadX509KeyPair(cfg.Redis.TLS.Certificate, cfg.Redis.TLS.Key) - if err != nil { - panic(err) + if cfg.Redis.TLS.Certificate != "" && cfg.Redis.TLS.Key != "" { + tlsConf.Certificates = make([]tls.Certificate, 1) + tlsConf.Certificates[0], err = tls.LoadX509KeyPair(cfg.Redis.TLS.Certificate, cfg.Redis.TLS.Key) + if err != nil { + panic(err) + } } if len(cfg.Redis.TLS.RootCAs) != 0 { pool := x509.NewCertPool()