From c0cd082c93b1e5924b2759c90d316a30a8ef87d1 Mon Sep 17 00:00:00 2001
From: MuK IT GmbH <mathias.markl@mukit.at>
Date: Sun, 26 Jan 2020 03:48:29 +0000
Subject: [PATCH] publish muk_session_store - 13.0

---
 muk_session_store/README.rst     | 17 +++++++++++++++++
 muk_session_store/doc/index.rst  | 17 +++++++++++++++++
 muk_session_store/store/redis.py |  3 +++
 3 files changed, 37 insertions(+)

diff --git a/muk_session_store/README.rst b/muk_session_store/README.rst
index 004f1fb..c414815 100644
--- a/muk_session_store/README.rst
+++ b/muk_session_store/README.rst
@@ -119,12 +119,29 @@ The following fields can be modified in the config file:
 * session_store_port
 * session_store_dbindex
 * session_store_pass
+* session_store_ssl
+* session_store_ssl_cert_reqs
 
 Usage
 =====
 
 After setting the parameters, the session store is used automatically.
 
+In order to use ssl, which is a requirement of some databases, session_store_ssl
+should be set to True and session_store_ssl_cert_reqs should be set to 'required'
+except in the case where the server certificate does not match the host name.
+
+e.g.
+# Server has a proper certificate
+session_store_ssl=True
+session_store_ssl_cert_reqs=required
+
+# Server does not have a proper certificate (AWS possibly)
+session_store_ssl=True
+session_store_ssl_cert_reqs=None
+
+For more information please see the redis python module documentation
+
 Credit
 ======
 
diff --git a/muk_session_store/doc/index.rst b/muk_session_store/doc/index.rst
index 004f1fb..c414815 100644
--- a/muk_session_store/doc/index.rst
+++ b/muk_session_store/doc/index.rst
@@ -119,12 +119,29 @@ The following fields can be modified in the config file:
 * session_store_port
 * session_store_dbindex
 * session_store_pass
+* session_store_ssl
+* session_store_ssl_cert_reqs
 
 Usage
 =====
 
 After setting the parameters, the session store is used automatically.
 
+In order to use ssl, which is a requirement of some databases, session_store_ssl
+should be set to True and session_store_ssl_cert_reqs should be set to 'required'
+except in the case where the server certificate does not match the host name.
+
+e.g.
+# Server has a proper certificate
+session_store_ssl=True
+session_store_ssl_cert_reqs=required
+
+# Server does not have a proper certificate (AWS possibly)
+session_store_ssl=True
+session_store_ssl_cert_reqs=None
+
+For more information please see the redis python module documentation
+
 Credit
 ======
 
diff --git a/muk_session_store/store/redis.py b/muk_session_store/store/redis.py
index e5ea936..c6c3c32 100644
--- a/muk_session_store/store/redis.py
+++ b/muk_session_store/store/redis.py
@@ -60,6 +60,8 @@ class RedisSessionStore(SessionStore):
             port=int(config.get("session_store_port", 6379)),
             db=int(config.get("session_store_dbindex", 1)),
             password=config.get("session_store_pass", None),
+            ssl=config.get("session_store_ssl", False),
+            ssl_cert_reqs=config.get("session_store_ssl_cert_reqs", None),
         )
 
     def _encode_session_key(self, key):
@@ -89,3 +91,4 @@ class RedisSessionStore(SessionStore):
             return self.session_class(pickle.loads(payload), sid, False)
         else:
             return self.session_class({}, sid, False)
+