<div dir="ltr">Hi, <div><br></div><div>Thanks for pointing out this problem, I've added a more detailed example for ssl-options to the upcoming 3.8 guide.</div><div><br></div><div>Regards, </div><div><br>Robert</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Aug 16, 2016 at 11:53 PM, <span dir="ltr"><<a href="mailto:thejaguar@tutanota.de" target="_blank">thejaguar@tutanota.de</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div>
its part of tls options so <span class=""><div><br></div><div>t<span style="line-height:1.5">ls( key-file("/usr/local/etc/<wbr>hostcert.key")</span></div><div>cert-file("/usr/local/etc/<wbr>hostcert.pem")<br>peer_verify(optional-<wbr>untrusted)</div></span><div><span style="font-size:11.0pt;font-family:"calibri",sans-serif">ssl-options(no-sslv3,no-tlsv1)<wbr> </span><br></div><div>)<br>);<br>The Jaguar<br><br>16. Aug 2016 12:13 by <a href="mailto:Joseph.Lupo@T-Mobile.com" target="_blank">Joseph.Lupo@T-Mobile.com</a>:<div><div class="h5"><br><br><blockquote style="border-left:1px solid #93a3b8;padding-left:10px;margin-left:5px">The syslog-ng documentation is very unclear. Where would we put the ssl-options(no-sslv2, no-sslv3, no-tlsv1) entry for disabling sslv2, sslv3 and tlsv1?<br><br>The following works for enabling TLS on our host, but I can’t figure out where to insert the ssl-options.<br><br>source s_net {<br>network(ip('<our IP>') port(<our port>)<br> transport("tls")<br> tls( key-file("/usr/local/etc/<wbr>hostcert.key")<br> cert-file("/usr/local/etc/<wbr>hostcert.pem")<br> peer_verify(optional-<wbr>untrusted))<br> );<br>};<br><br>Joe Lupo<br>T-Mobile USA<br>Principal Engineer, System Design & Strategy<br><a href="tel:%28973%29%20440-8768" value="+19734408768" target="_blank">(973) 440-8768</a><br> <br><br>______________________________<wbr>______________________________<wbr>__________________<br>Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" target="_blank">https://lists.balabit.hu/<wbr>mailman/listinfo/syslog-ng</a><br>Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" target="_blank">http://www.balabit.com/<wbr>support/documentation/?<wbr>product=syslog-ng</a><br>FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" target="_blank">http://www.balabit.com/wiki/<wbr>syslog-ng-faq</a></blockquote></div></div></div> </div>
<br>______________________________<wbr>______________________________<wbr>__________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" rel="noreferrer" target="_blank">https://lists.balabit.hu/<wbr>mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" rel="noreferrer" target="_blank">http://www.balabit.com/<wbr>support/documentation/?<wbr>product=syslog-ng</a><br>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" rel="noreferrer" target="_blank">http://www.balabit.com/wiki/<wbr>syslog-ng-faq</a><br>
<br>
<br></blockquote></div><br></div>