<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body>
its part of tls options so <div><br /></div><div>t<span style="line-height: 1.5">ls( key-file("/usr/local/etc/hostcert.key")</span></div><div>cert-file("/usr/local/etc/hostcert.pem")<br />peer_verify(optional-untrusted)</div><div><span style="font-size: 11.0pt ; font-family: "calibri" , sans-serif">ssl-options(no-sslv3,no-tlsv1) </span><br /></div><div>)<br />);<br />The Jaguar<br /><br />16. Aug 2016 12:13 by <a href="mailto:Joseph.Lupo@T-Mobile.com" target="_blank">Joseph.Lupo@T-Mobile.com</a>:<br /><br /><blockquote class="tutanota_quote" style="border-left: 1px solid #93A3B8; padding-left: 10px; margin-left: 5px;">The syslog-ng documentation is very unclear. Where would we put the ssl-options(no-sslv2, no-sslv3, no-tlsv1) entry for disabling sslv2, sslv3 and tlsv1?<br /><br />The following works for enabling TLS on our host, but I can’t figure out where to insert the ssl-options.<br /><br />source s_net {<br />network(ip('<our IP>') port(<our port>)<br /> transport("tls")<br /> tls( key-file("/usr/local/etc/hostcert.key")<br /> cert-file("/usr/local/etc/hostcert.pem")<br /> peer_verify(optional-untrusted))<br /> );<br />};<br /><br />Joe Lupo<br />T-Mobile USA<br />Principal Engineer, System Design & Strategy<br />(973) 440-8768<br /> <br /><br />______________________________________________________________________________<br />Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br />Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br />FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" target="_blank">http://www.balabit.com/wiki/syslog-ng-faq</a></blockquote></div> </body>
</html>