[rsyslog-notify] Forum Thread: Re: TLS, but without supplying cert info? - (Mode 'reply')

[noreply at adiscon.com]

User: atticus 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=26665#p26665

Message: 
----------
This is a good catch for me, gentlemen.  Thanks!  So, is all I have to do
for encrypted TLS is

streamdrivermode="1"
streamdriver="gtls"

correct?

I do have a question on the TLS syntax for 8.4.  I'm trying to use the
certificate approach with this syntax (inside an action() statement.  I am
using
streamdrivercafile="ca.pem"
streamdrivercertfile="ca.pem"
streamdriverkeyfile="key.pem"
streamdrivermode="1"
streamdriver="gtls"
streamdriverauthmode="x509/name"
streamdriverpermittedpeers="hostb1")

or# tls="on"
# tls.caCert="/etc/rsyslog.d/certs/ca.pem"
# tls.myCert="/etc/rsyslog.d/certs/cert.pem"
# tls.myPrivKey="etc/rsyslog.d/certs/key.pem"
# tls.authmode="name"
# tls.permittedpeer="hostany")

any thoughts on these?  I've seen the tls="on" status on the rsyslog page
with a date of 2013, so I think it's supported??  Thanks very much.