[rsyslog-notify] Forum Thread: Re: Mutual auth TLS: rsyslog doesn't terminate on 1st handsh - (Mode 'reply')

[noreply at adiscon.com]

User: badgernaut 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=26942#p26942

Message: 
----------
Just having a look at the stable v8 baseline source in github - think I've
found the relevant code in the gtls netstream driver. The peer certificate
checking part is in the AcceptConnReq():


[url:rrj8xlw9]https://github.com/rsyslog/rsyslog/blob/2407693552f70f0ed2dd71c839ef98a54b7e6d13/runtime/nsd_gtls.c#L1506[/url:rrj8xlw9]

It will return the error, however the AcceptConnReq() function does not
close the initial connection that is made at the start of the function,
here:


[url:rrj8xlw9]https://github.com/rsyslog/rsyslog/blob/2407693552f70f0ed2dd71c839ef98a54b7e6d13/runtime/nsd_gtls.c#L1482[/url:rrj8xlw9]

Should the finalize_it section not close and delete the base TCP
connection?