[rsyslog-notify] Forum Thread: Getting gibberish in the log using TLS - (Mode 'post')

noreply at adiscon.com noreply at adiscon.com
Mon Sep 1 20:04:33 CEST 2014


User: LinuxDude2014 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=24898#p24898

Message: 
----------
I am getting gibberish in the log using TLS

Ex:
[root at logging 11.11.22.22]# cat
\#026#003#002#000V#001#000#000R#003#002T#004.log 
2014-09-01T12:12:39.835779-05:00 11.11.22.22
#026#003#002#000V#001#000#000R#003#002T#004�#007O"�^�=��#032�8;�i�#015X�#005iY#011h��#031`>#000#000$#0003#000E#0009#000�#000#026#0002#000D#0008#000�#000#023#000f#000/#000A#0005#000�

2014-09-01T12:13:13.206696-05:00 11.11.22.22
#026#003#002#000V#001#000#000R#003#002T#004�)V�.���K0&��6=җ���<#002�����#020��#000#000$#0003#000E#0009#000�#000#026#0002#000D#0008#000�#000#023#000f#000/#000A#0005#000�

2014-09-01T12:13:18.973545-05:00 11.11.22.22
#026#003#002#000V#001#000#000R#003#002T#004�/*�L��V'���»�����$R#005#177��#023�E�[#000#000$#0003#000E#0009#000�#000#026#0002#000D#0008#000�#000#023#000f#000/#000A#0005#000�

2014-09-01T12:20:34.056972-05:00 11.11.22.22 

A connection is OK:
root at server134 [~]# openssl s_client -connect 69.65.26.34:10514 
CONNECTED(00000003)

Does the client need a crt and key at all?  The instructions just say to
use a CA, I used the same CA that's on the server.
The client setup is equally simple. You need less certificates, just the CA
cert. 
    # certificate files - just CA for a client
    $DefaultNetstreamDriverCAFile /path/to/contrib/gnutls/ca.pem

In my client config I added this:
[code:3thrm9f8]# certificate files - just CA for a client
$DefaultNetstreamDriverCAFile /root/ca.pem

# set up the action
$DefaultNetstreamDriver gtls # use gtls netstream driver
$ActionSendStreamDriverMode 1 # require TLS for the connection
$ActionSendStreamDriverAuthMode anon # server is NOT authenticated
authpriv.* @@(o)69.65.26.34:10514 #[/code:3thrm9f8]

And on the server I have:
[code:3thrm9f8]
# make gtls driver the default
$DefaultNetstreamDriver gtls

# certificate files
$DefaultNetstreamDriverCAFile /root/ca.pem
$DefaultNetstreamDriverCertFile /root/cert.pem
$DefaultNetstreamDriverKeyFile /root/key.pem

$ModLoad imtcp # load TCP listener

$InputTCPServerStreamDriverMode 1 # run driver in TLS-only mode
$InputTCPServerStreamDriverAuthMode anon # client is NOT authenticated
$InputTCPServerRun 10514 # start up listener at port 10514
[/code:3thrm9f8]

How can I fix/further troubleshoot this?

Not using TLS it logs OK.

TIA


More information about the rsyslog-notify mailing list