Skip to content

Commit 5b35ff6

Browse files
authored
Merge pull request #49971 from aravindyeduvaka/patch-1
Updated docs to make TLS instructions clearer.
2 parents dac602a + 7ba2b81 commit 5b35ff6

File tree

1 file changed

+22
-16
lines changed

1 file changed

+22
-16
lines changed

articles/azure-cache-for-redis/cache-remove-tls-10-11.md

Lines changed: 22 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ There's an industry-wide push toward the exclusive use of Transport Layer Securi
1616

1717
As a part of this effort, we'll be making the following changes to Azure Cache for Redis:
1818

19-
* **Phase 1:** We'll configure the default minimum TLS version to be 1.2 for newly created cache instances. Existing cache instances won't be updated at this point. You'll be allowed to [change the minimum TLS version](cache-configure.md#access-ports) back to 1.0 or 1.1 for backward compatibility, if needed. This change can be done through the Azure portal or other management APIs.
19+
* **Phase 1:** We'll configure the default minimum TLS version to be 1.2 for newly created cache instances. (This used to be TLS 1.0.) Existing cache instances won't be updated at this point. You'll be allowed to [change the minimum TLS version](cache-configure.md#access-ports) back to 1.0 or 1.1 for backward compatibility, if needed. This change can be done through the Azure portal or other management APIs.
2020
* **Phase 2:** We'll stop supporting TLS versions 1.0 and 1.1. After this change, your application will be required to use TLS 1.2 or later to communicate with your cache.
2121

2222
Additionally, as a part of this change, we'll be removing support for older, insecure cypher suites. Our supported cypher suites will be restricted to the following when the cache is configured with a minimum TLS version of 1.2.
@@ -84,21 +84,27 @@ Node Redis and IORedis use TLS 1.2 by default.
8484

8585
### PHP
8686

87-
Predis on PHP 7 won't work because PHP 7 supports only TLS 1.0. On PHP 7.2.1 or earlier, Predis uses TLS 1.0 or 1.1 by default. You can specify TLS 1.2 when you create the client instance:
88-
89-
``` PHP
90-
$redis=newPredis\Client([
91-
'scheme'=>'tls',
92-
'host'=>'host',
93-
'port'=>6380,
94-
'password'=>'password',
95-
'ssl'=>[
96-
'crypto_type'=>STREAM_CRYPTO_METHOD_TLSv1_2_CLIENT,
97-
],
98-
]);
99-
```
100-
101-
On PHP 7.3 or above, Predis uses the latest TLS version.
87+
#### Predis
88+
89+
* Versions earlier than PHP 7: Predis supports only TLS 1.0. These versions don't work with TLS 1.2; you must upgrade to use TLS 1.2.
90+
91+
* PHP 7.0 to PHP 7.2.1: Predis uses only TLS 1.0 or 1.1 by default. You can use the following workaround to use TLS 1.2. Specify TLS 1.2 when you create the client instance:
92+
93+
``` PHP
94+
$redis=newPredis\Client([
95+
'scheme'=>'tls',
96+
'host'=>'host',
97+
'port'=>6380,
98+
'password'=>'password',
99+
'ssl'=>[
100+
'crypto_type'=>STREAM_CRYPTO_METHOD_TLSv1_2_CLIENT,
101+
],
102+
]);
103+
```
104+
105+
* PHP 7.3 and later versions: Predis uses the latest TLS version.
106+
107+
#### PhpRedis
102108

103109
PhpRedis doesn't support TLS on any PHP version.
104110

0 commit comments

Comments
 (0)