[rsyslog] TLS certificates

[Juan Miscaro]

I has reading the docs [1] and this confusd me to.  It says

"neither the client nor the server are authenticated. So while the
message transfer is encrypted, you can not be sure which peer you are
talking to"

Also, how can client encrypt without having any keys specified in its config?

Example for the client shows:

$DefaultNetstreamDriverCAFile /path/to/contrib/gnutls/ca.pem
$ActionSendStreamDriverAuthMode anon # server is NOT authenticated

2nd question: Why is the server not authenticated?

/juan

[1] http://www.rsyslog.com/doc-rsyslog_tls.html