[rsyslog-notify] Forum Thread: tbs syntax using Rainer Script - (Mode 'post')

noreply at adiscon.com noreply at adiscon.com
Fri Jun 24 02:46:54 CEST 2016


User: atticus 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=26660#p26660

Message: 
----------
looking for a way in different actions to do TLS to two different servers,
each with it's own certificate, but I can't figure out how to get the
second cert into the 2nd action, because the examples I've seen look like
this:

before the action statement

 50 $DefaultNetstreamDriverCAFile /etc/rsyslog.d/certs/ca.pem
 51 $DefaultNetstreamDriverCertFile /etc/rsyslog.d/certs/ca.pem
 52 $DefaultNetstreamDriverKeyFile /etc/rsyslog.d/certs/local-key.pem

inside the action statement

103 #
104 # streamdrivermode="1"
105 # streamdriver="gtls"
106 # streamdriverauthmode="x509/name"
107 # streamdriverpermittedpeers="hostb1")
108 #

That part passes the rsyslogd -N1 check OK.  But I ran across this in the
Red Hat Enterprise v7 Users' Guide


109 tls="on"
110 tls.caCert="/etc/rsyslog.d/certs/ca.pem"
111 tls.myCert="/etc/rsyslog.d/certs/cert.pem"
112 tls.myPrivKey="etc/rsyslog.d/certs/key.pem"
113 tls.authmode="name"
114 tls.permittedpeer="hostany")

I believe this would give me a way to put these inside a 2nd action
statement and change the paths to a different cert.
These failed the rsyslogd -N1.  Has anyone used these with success or are
aware of this being proper Rainer script syntax?

Thanks in advance for any thoughts/suggestions you might have.  It is much
appreciated.


More information about the rsyslog-notify mailing list