[syslog-ng] syslog-ng using ssl
Luigi Augello
luigi.augello at unipa.it
Sun Mar 22 17:53:06 CET 2009
Hello
I try to use ssl ad I have the follow scenario:
One server (192.168.1.2) with this syslog.ng.conf
###########################################
@version:3.0
source s_sk{file("/var/log/messages");};
source s_ssl{
tcp(ip("0.0.0.0") port (1999)
tls(key_file("/root/Scaricati/certificati/privkey.pem")
cert_file("/root/Scaricati/certificati/cacert.pem")));};
destination d_file{file("/var/log/syslog-ng.log");};
log{source(s_sk);destination(d_file);};
log{source(s_ssl);destination(d_file);};
One client (192.168.1.3) with this syslog.ng.conf
###################################################
@version:3.0
source s_sk{file("/var/log/messages");};
destination d_file{file("/var/log/syslog-ng.log");};
destination d_ssl{tcp("192.168.1.2" port (1999)
tls(ca_dir("/root/software/ca/")));};
log{source(s_sk);destination(d_file);};
log{source(s_sk);destination(d_ssl);};
I haven't a CA certificate and I use a self-signed certificate created
by these instructions
opennsl genrsa -out privkey.pem
opennsl req -new -x509 -key prixkey.pem -out cacert.pem -days 1095
I follow step by step the instructions on "The syslog-ng Administrators
guide "
page 58 and so on and I copied the cacert.pem generated in the server
in the client and I use ln -s ....
When I try to start the server it starts. Though the client doesn't give
me any errors it doesn't start. I suppose the certificate may crate
some problems.
tanks for help
Luigi
More information about the syslog-ng
mailing list