[syslog-ng] Syslog over TLS : Protocol is TCP and TLS

7 Mar 2016


      Hi  All,
Finally I was able to setup syslog-ng client and server. Communicate over TLS. Thanks for all your help.
In wireshark capture  I am seeing all protocol as TCP and not as TLS.  Please let me know whether my communication has happened over TLS.
If yes how do I validate that. Can I  enable additional logs  in  syslog-ng ?


My tls part of conf file

Client
--------
destination d_destination {
    syslog("135.254.163.151" port(6514)
                        transport("tls")
        tls( ca_dir("/etc/ca.d")
         key_file("/etc/cert.d/myCliPrivate.key")
         cert_file("/etc/cert.d/myCliCert.pem") )
    );
};


Server
---------
source d_source {
          syslog(ip("135.254.163.151") port(6514)
                    transport("tls")
             tls( key_file("/etc/syslog-ng/cert.d/mySerPrivate.key")
             cert_file("/etc/syslog-ng/cert.d/mySerCert.pem")
             ca_dir("/etc/syslog-ng/ca.d"))
    );
};


Regards,
Girish

[syslog-ng] Syslog over TLS : Protocol is TCP and TLS

Girish Kumar