Skip to content

Commit 837163d

Browse files
Updated docs to make TLS instructions clearer.
Clearer instructions for Predis client on PHP. Also clarify the previous minimum version.
1 parent ef7287b commit 837163d

File tree

1 file changed

+8
-3
lines changed

1 file changed

+8
-3
lines changed

articles/azure-cache-for-redis/cache-remove-tls-10-11.md

Lines changed: 8 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,8 @@ There's an industry-wide push toward the exclusive use of Transport Layer Securi
1616

1717
As a part of this effort, we'll be making the following changes to Azure Cache for Redis:
1818

19-
* **Phase 1:** We'll configure the default minimum TLS version to be 1.2 for newly created cache instances. Existing cache instances won't be updated at this point. You'll be allowed to [change the minimum TLS version](cache-configure.md#access-ports) back to 1.0 or 1.1 for backward compatibility, if needed. This change can be done through the Azure portal or other management APIs.
19+
* **Phase 1:** We'll configure the default minimum TLS version to be 1.2 for newly created cache instances
20+
(This used to be TLS 1.0). Existing cache instances won't be updated at this point. You'll be allowed to [change the minimum TLS version](cache-configure.md#access-ports) back to 1.0 or 1.1 for backward compatibility, if needed. This change can be done through the Azure portal or other management APIs.
2021
* **Phase 2:** We'll stop supporting TLS versions 1.0 and 1.1. After this change, your application will be required to use TLS 1.2 or later to communicate with your cache.
2122

2223
Additionally, as a part of this change, we'll be removing support for older, insecure cypher suites. Our supported cypher suites will be restricted to the following when the cache is configured with a minimum TLS version of 1.2.
@@ -83,8 +84,11 @@ In Java 8, TLS 1.2 is used by default and shouldn't require updates to your clie
8384
Node Redis and IORedis use TLS 1.2 by default.
8485

8586
### PHP
86-
87-
Predis on PHP 7 won't work because PHP 7 supports only TLS 1.0. On PHP 7.2.1 or earlier, Predis uses TLS 1.0 or 1.1 by default. You can specify TLS 1.2 when you create the client instance:
87+
#### Predis
88+
< PHP 7 Predis supports only TLS 1.0. Does not work with TLS 1.2, you need to upgrade.
89+
90+
PHP 7.0 to PHP 7.2.1 -> Predis uses only TLS 1.0 or 1.1 by default. You can use the workaround below to use TLS 1.2.
91+
Specify TLS 1.2 when you create the client instance:
8892

8993
``` PHP
9094
$redis=newPredis\Client([
@@ -100,6 +104,7 @@ $redis=newPredis\Client([
100104

101105
On PHP 7.3 or above, Predis uses the latest TLS version.
102106

107+
#### PhpRedis
103108
PhpRedis doesn't support TLS on any PHP version.
104109

105110
### Python

0 commit comments

Comments
 (0)