Module redis 

stores:-backed CertStorage (redis/valkey; redis-store feature).

Keys under the store’s key_prefix: acme:account, acme:cert:{<id>}, acme:challenge:<domain> (with TTL), acme:lease:{<id>} (SET NX PX, owner-checked renew/release via Lua). Account credentials and certificate private keys are sealed with CookieSealer (AES-256-GCM, key = SHA-256 of acme.storage.encryption_key) before they are written; chains are stored in clear. Hash tags keep one certificate’s keys on a single Cluster slot.

Structs

CertRecord 🔒

RedisCertStorage

Holds the name of the store, never a client: the client is resolved from the live StoreRegistry on every call, so a PUT /api/stores/:name credential/URL change (which swaps the registry inside PluginResources) is picked up by the next ACME operation instead of being pinned to the connection that existed at startup.

Constants

RELEASE_LEASE_SCRIPT 🔒

RENEW_LEASE_SCRIPT 🔒

SEAL_TTL 🔒

Sealed blobs never expire on their own; storage TTLs govern lifetime.

Functions

account_key 🔒

cert_key 🔒

challenge_key 🔒

lease_key 🔒