From 7f8e44fbcb11eee1dcb961d7c352ae3b649360c5 Mon Sep 17 00:00:00 2001 From: Rachel Elledge Date: Mon, 20 Apr 2026 15:25:08 -0500 Subject: [PATCH 1/4] DOC-6490 RS: Fixed authenticate DB connections with cert-based auth --- .../security/certificates/certificate-based-authentication.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/operate/rs/security/certificates/certificate-based-authentication.md b/content/operate/rs/security/certificates/certificate-based-authentication.md index ba8ee930de..e4f525f493 100644 --- a/content/operate/rs/security/certificates/certificate-based-authentication.md +++ b/content/operate/rs/security/certificates/certificate-based-authentication.md @@ -200,7 +200,7 @@ To set up certificate-based authentication for databases: ### Authenticate database connections -To connect to a database with certificate-based authentication, you must provide a client certificate, signed by the trusted CA `mtls_trusted_ca`, and a private key. +To connect to a database with certificate-based authentication, you must provide a client certificate you added to the database to [enable mutual TLS]({{}}) (`authentication_ssl_client_certs` in the REST API), and a private key. The following example shows how to connect to a Redis database with [`redis-cli`]({{}}): From b722b12dd620e88010e1a10982bb15344ad939ef Mon Sep 17 00:00:00 2001 From: Rachel Elledge <86307637+rrelledge@users.noreply.github.com> Date: Mon, 20 Apr 2026 15:28:14 -0500 Subject: [PATCH 2/4] DOC-6490 Added a word for clarity --- .../security/certificates/certificate-based-authentication.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/content/operate/rs/security/certificates/certificate-based-authentication.md b/content/operate/rs/security/certificates/certificate-based-authentication.md index e4f525f493..3e5cb40a8d 100644 --- a/content/operate/rs/security/certificates/certificate-based-authentication.md +++ b/content/operate/rs/security/certificates/certificate-based-authentication.md @@ -200,7 +200,7 @@ To set up certificate-based authentication for databases: ### Authenticate database connections -To connect to a database with certificate-based authentication, you must provide a client certificate you added to the database to [enable mutual TLS]({{}}) (`authentication_ssl_client_certs` in the REST API), and a private key. +To connect to a database with certificate-based authentication, you must provide a client certificate you previously added to the database to [enable mutual TLS]({{}}) (`authentication_ssl_client_certs` in the REST API), and a private key. The following example shows how to connect to a Redis database with [`redis-cli`]({{}}): @@ -210,4 +210,4 @@ redis-cli -h -p --tls --cacert .pem ## Limitations -- Certificate-based authentication is not implemented for the Cluster Manager UI. \ No newline at end of file +- Certificate-based authentication is not implemented for the Cluster Manager UI. From 905aa97f506b59cc6c20a5bb9679b370dd5f3294 Mon Sep 17 00:00:00 2001 From: Rachel Elledge Date: Mon, 20 Apr 2026 15:33:05 -0500 Subject: [PATCH 3/4] DOC-6490 Copied fix for authenticating DB connections with cert-based auth to 7.22 and 7.8 versions --- .../security/certificates/certificate-based-authentication.md | 2 +- .../security/certificates/certificate-based-authentication.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/content/operate/rs/7.22/security/certificates/certificate-based-authentication.md b/content/operate/rs/7.22/security/certificates/certificate-based-authentication.md index c14b647f08..9d865daea1 100644 --- a/content/operate/rs/7.22/security/certificates/certificate-based-authentication.md +++ b/content/operate/rs/7.22/security/certificates/certificate-based-authentication.md @@ -120,7 +120,7 @@ curl --request --url https://:9443/}}) (`authentication_ssl_client_certs` in the REST API), and a private key. The following example shows how to connect to a Redis database with [`redis-cli`]({{}}): diff --git a/content/operate/rs/7.8/security/certificates/certificate-based-authentication.md b/content/operate/rs/7.8/security/certificates/certificate-based-authentication.md index 7fbb751ad9..42c05c15cd 100644 --- a/content/operate/rs/7.8/security/certificates/certificate-based-authentication.md +++ b/content/operate/rs/7.8/security/certificates/certificate-based-authentication.md @@ -104,7 +104,7 @@ curl --request --url https://:9443/}}) (`authentication_ssl_client_certs` in the REST API), and a private key. The following example shows how to connect to a Redis database with [`redis-cli`]({{}}): From bf14f440c857d0ffac153e93c5ccb06559ba31c2 Mon Sep 17 00:00:00 2001 From: Rachel Elledge Date: Tue, 21 Apr 2026 16:51:25 -0500 Subject: [PATCH 4/4] Feedback update to adjust wording --- .../security/certificates/certificate-based-authentication.md | 2 +- .../security/certificates/certificate-based-authentication.md | 2 +- .../security/certificates/certificate-based-authentication.md | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/content/operate/rs/7.22/security/certificates/certificate-based-authentication.md b/content/operate/rs/7.22/security/certificates/certificate-based-authentication.md index 9d865daea1..67ee0d7cb2 100644 --- a/content/operate/rs/7.22/security/certificates/certificate-based-authentication.md +++ b/content/operate/rs/7.22/security/certificates/certificate-based-authentication.md @@ -120,7 +120,7 @@ curl --request --url https://:9443/}}) (`authentication_ssl_client_certs` in the REST API), and a private key. +To connect to a database with certificate-based authentication, you must provide a client certificate, signed by a trusted CA, and a private key. The client certificate must either be one you previously added to the database to [enable mutual TLS]({{}}) (`authentication_ssl_client_certs` in the REST API), or be signed by one of these certificates. The following example shows how to connect to a Redis database with [`redis-cli`]({{}}): diff --git a/content/operate/rs/7.8/security/certificates/certificate-based-authentication.md b/content/operate/rs/7.8/security/certificates/certificate-based-authentication.md index 42c05c15cd..2710fb0ddc 100644 --- a/content/operate/rs/7.8/security/certificates/certificate-based-authentication.md +++ b/content/operate/rs/7.8/security/certificates/certificate-based-authentication.md @@ -104,7 +104,7 @@ curl --request --url https://:9443/}}) (`authentication_ssl_client_certs` in the REST API), and a private key. +To connect to a database with certificate-based authentication, you must provide a client certificate, signed by a trusted CA, and a private key. The client certificate must either be one you previously added to the database to [enable mutual TLS]({{}}) (`authentication_ssl_client_certs` in the REST API), or be signed by one of these certificates. The following example shows how to connect to a Redis database with [`redis-cli`]({{}}): diff --git a/content/operate/rs/security/certificates/certificate-based-authentication.md b/content/operate/rs/security/certificates/certificate-based-authentication.md index 3e5cb40a8d..ba6aa7b27b 100644 --- a/content/operate/rs/security/certificates/certificate-based-authentication.md +++ b/content/operate/rs/security/certificates/certificate-based-authentication.md @@ -200,7 +200,7 @@ To set up certificate-based authentication for databases: ### Authenticate database connections -To connect to a database with certificate-based authentication, you must provide a client certificate you previously added to the database to [enable mutual TLS]({{}}) (`authentication_ssl_client_certs` in the REST API), and a private key. +To connect to a database with certificate-based authentication, you must provide a client certificate, signed by a trusted CA, and a private key. The client certificate must either be one you previously added to the database to [enable mutual TLS]({{}}) (`authentication_ssl_client_certs` in the REST API), or be signed by one of these certificates. The following example shows how to connect to a Redis database with [`redis-cli`]({{}}):