Certificates In Clear Text In HAA

In HAA nodes, certificate is stored in clear text. When the certificates are deleted, those files are being created again. What should be performed for the certs to not get stored in clear text /etc/opt/redislabs/mesh_ca_signed_key.pem /etc/opt/redislabs/gossip_ca_signed_key.pem /etc/opt/redislabs/ccs_internode_encryption_key.pem /etc/opt/redislabs/data_internode_encryption_key.pem

Certificates are the internal keys used in the Redis cluster internal communication. Redis manages these and rotates them periodically, when it does so it writes them to the file system.


It is advised to not tamper with them.

image012.png