[rsyslog-notify] Forum Thread: tbs syntax using Rainer Script - (Mode 'post')
noreply at adiscon.com
noreply at adiscon.com
Fri Jun 24 02:46:54 CEST 2016
User: atticus
Forumlink: http://kb.monitorware.com/viewtopic.php?p=26660#p26660
Message:
----------
looking for a way in different actions to do TLS to two different servers,
each with it's own certificate, but I can't figure out how to get the
second cert into the 2nd action, because the examples I've seen look like
this:
before the action statement
50 $DefaultNetstreamDriverCAFile /etc/rsyslog.d/certs/ca.pem
51 $DefaultNetstreamDriverCertFile /etc/rsyslog.d/certs/ca.pem
52 $DefaultNetstreamDriverKeyFile /etc/rsyslog.d/certs/local-key.pem
inside the action statement
103 #
104 # streamdrivermode="1"
105 # streamdriver="gtls"
106 # streamdriverauthmode="x509/name"
107 # streamdriverpermittedpeers="hostb1")
108 #
That part passes the rsyslogd -N1 check OK. But I ran across this in the
Red Hat Enterprise v7 Users' Guide
109 tls="on"
110 tls.caCert="/etc/rsyslog.d/certs/ca.pem"
111 tls.myCert="/etc/rsyslog.d/certs/cert.pem"
112 tls.myPrivKey="etc/rsyslog.d/certs/key.pem"
113 tls.authmode="name"
114 tls.permittedpeer="hostany")
I believe this would give me a way to put these inside a 2nd action
statement and change the paths to a different cert.
These failed the rsyslogd -N1. Has anyone used these with success or are
aware of this being proper Rainer script syntax?
Thanks in advance for any thoughts/suggestions you might have. It is much
appreciated.
More information about the rsyslog-notify
mailing list