[syslog-ng] IPv6 TLS source question
Jeff Lange
jlange6648 at gmail.com
Wed Jun 26 21:02:54 CEST 2013
I've observed this in both 3.3.x and 3.4.2 (ubuntu 12.04 x86_64)
-Jeff
On Wed, Jun 26, 2013 at 2:43 PM, Balazs Scheidler <bazsi77 at gmail.com> wrote:
> Syslog-ng version?
>
> IIRC there were related fixes in 3.4.
> On Jun 26, 2013 6:12 PM, "Jeff Lange" <jlange6648 at gmail.com> wrote:
>
>> I'm attempting to setup a TCP IPv6 source declaration that uses TLS but
>> syslog-ng is not happy with the configuration file.
>>
>> The following is what I use for IPv4 and it works fine:
>>
>> source s_tls
>> {
>> syslog( ip(0.0.0.0) port(6514)
>> transport( "tls" )
>> tls (
>> key_file("/srv/syslog-ng/certs/priv-key.pem")
>> cert_file("/srv/syslog-ng/certs/id-cert.pem")
>> ca_dir("/srv/syslog-ng/certs")
>> cipher_suite("SHA256:!aNULL:!eNULL:!ECDH:!DSS")
>> )
>> );
>> };
>>
>> However the following is not valid:
>>
>> source s_tls6 {
>> syslog( ip("::") port(6515)
>> transport( "tls" )
>> tls (
>> key_file("/srv/syslog-ng/certs/priv-key.pem")
>> cert_file("/srv/syslog-ng/certs/id-cert.pem")
>> ca_dir("/srv/syslog-ng/certs")
>> cipher_suite("SHA256:!aNULL:!eNULL:!ECDH:!DSS")
>> )
>> );
>> };
>>
>> I've tried the ip with and without quotes with no luck. What am I doing
>> wrong?
>>
>> Thanks
>> -Jeff
>>
>>
>> ______________________________________________________________________________
>> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
>> Documentation:
>> http://www.balabit.com/support/documentation/?product=syslog-ng
>> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>>
>>
>>
>
> ______________________________________________________________________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation:
> http://www.balabit.com/support/documentation/?product=syslog-ng
> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20130626/b3e88f6a/attachment.htm
More information about the syslog-ng
mailing list