Using socat:

brew install socat

Create the tunnel:

socat -v TCP-LISTEN:6379,fork,reuseaddr ssl:your.redis.example.com:6379

Use redis-cli as usual