Function _prepare_ssl_certificates

tests/test_scenario/conftest.py:229–259

Prepare SSL certificates for Redis cluster connection. Args: cert_chain: PEM-encoded certificate chain containing client cert + intermediate + CA cert. This is the full certificate chain that will be used to validate the server. Returns: dict: SSL co

(cert_chain: bool)

def _prepare_ssl_certificates(cert_chain: bool) -> dict:
    """
    Prepare SSL certificates for Redis cluster connection.

    Args:
        cert_chain: PEM-encoded certificate chain containing client cert + intermediate + CA cert.
                   This is the full certificate chain that will be used to validate the server.

    Returns:
        dict: SSL configuration kwargs for RedisCluster
    """
    certs_config_path = os.environ.get("MTLS_CONFIG_PATH", None)

    if not cert_chain:
        return {
            "ssl_cert_reqs": "none",
            "ssl_check_hostname": False,
        }

    if not certs_config_path:
        raise ValueError(
            "MTLS enabled test is triggered but MTLS_CONFIG_PATH environment variable not set"
        )

    # The cert_chain contains the full chain (client cert + intermediate + root CA)
    # Use it as CA data for validating the server's certificate
    return {
        "ssl_cert_reqs": "none",
        "ssl_keyfile": os.path.join(certs_config_path, "client.key"),
        "ssl_certfile": os.path.join(certs_config_path, "client.crt"),
    }


@pytest.fixture()