From 5560bed5094a2eb208e3b810ae4bc6b803cc3808 Mon Sep 17 00:00:00 2001 From: Jonathan Salomon <56251201+joniredis@users.noreply.github.com> Date: Sat, 15 Jul 2023 22:55:22 +0300 Subject: [PATCH] Update tls-ssl.md Added note to clarify that PEM bundle contains multiple TLS certificates. --- content/rc/security/database-security/tls-ssl.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/content/rc/security/database-security/tls-ssl.md b/content/rc/security/database-security/tls-ssl.md index ad5b34a47f0..936ade91f03 100644 --- a/content/rc/security/database-security/tls-ssl.md +++ b/content/rc/security/database-security/tls-ssl.md @@ -111,6 +111,10 @@ The download contains a file called `redis_ca.pem`, which includes the following - Publicly trusted GlobalSign Root CA +{{}} +The downloaded PEM file contains multiple certificates, so please make sure to import **all** certificates to your client trust store. Client code often imports the first certficate only unless done properly. +{{}} + To inspect the certificates in `redis_ca.pem`, run the `keytool` command: ```sh