SSL not supported by hiredis driver message

[razasayed]

Im using the latest version of redis-rb which is version 4.6.0 and also of hiredis gem, version 0.6.3. Im trying to connect to a Redis cluster in AWS which has in transit encryption enabled as follows:

client = Redis.new(url: 'the url here', ssl: true)

I get the following response:

NotImplementedError (SSL not supported by hiredis driver)

Also, trying to do client = Redis.new(url: 'the url here', ssl_params: { verify_mode: OpenSSL::SSL::VERIFY_NONE }) leads to a Connection Timeout.

I saw that hiredis C library has enabled SSL support (redis/hiredis#645 ). However, is SSL support still not available in the ruby version ?. Is there any other way to get SSL working with redis in ruby ?

[supercaracal]

It seems that we are not ready to use the feature yet.

redis-rb/lib/redis/connection/hiredis.rb

Lines 12 to 29 in 4e76b03

	def self.connect(config)
	connection = ::Hiredis::Connection.new
	connect_timeout = (config.fetch(:connect_timeout, 0) * 1_000_000).to_i
	if config[:scheme] == "unix"
	connection.connect_unix(config[:path], connect_timeout)
	elsif config[:scheme] == "rediss" || config[:ssl]
	raise NotImplementedError, "SSL not supported by hiredis driver"
	else
	connection.connect(config[:host], config[:port], connect_timeout)
	end
	instance = new(connection)
	instance.timeout = config[:read_timeout]
	instance
	rescue Errno::ETIMEDOUT
	raise TimeoutError
	end

• hiredis now supports SSL #828
• Remove error caused by hiredis ssl not supported #1077
• hiredis now supports SSL hiredis-rb#58
• Add possibility to establish SSL connection with SSL_VERIFY_NONE hiredis-rb#72

[supercaracal]

You can use the default connector. https://github.com/redis/redis-rb/blob/master/lib/redis/connection/ruby.rb

[razasayed]

It seems that we are not ready to use the feature yet.

redis-rb/lib/redis/connection/hiredis.rb

Lines 12 to 29 in 4e76b03

	def self.connect(config)
	connection = ::Hiredis::Connection.new
	connect_timeout = (config.fetch(:connect_timeout, 0) * 1_000_000).to_i
	if config[:scheme] == "unix"
	connection.connect_unix(config[:path], connect_timeout)
	elsif config[:scheme] == "rediss" || config[:ssl]
	raise NotImplementedError, "SSL not supported by hiredis driver"
	else
	connection.connect(config[:host], config[:port], connect_timeout)
	end
	instance = new(connection)
	instance.timeout = config[:read_timeout]
	instance
	rescue Errno::ETIMEDOUT
	raise TimeoutError
	end

• hiredis now supports SSL #828
• Remove error caused by hiredis ssl not supported #1077
• hiredis now supports SSL hiredis-rb#58
• Add possibility to establish SSL connection with SSL_VERIFY_NONE hiredis-rb#72

@supercaracal In master branch that line has been removed 86df222 because hiredis now supports ssl. But redis-rb still not working with ssl when using hiredis driver.

[BobbyMcWho]

@razasayed hiredis supports SSL in versions > 1.0 it seems https://github.com/redis/hiredis/blob/master/CHANGELOG.md#100---2020-08-03

[stanhu]

To be clear, hiredis supports SSL, but hiredis-rb does NOT yet support this. #1077 should be reverted.

See the ongoing work in redis/hiredis-rb#58 (comment).

[byroot]

5.0 now rely on redis-client which does have an hiredis driver with SSL support. So closing.