[syslog-ng] Which version of syslog-ng support TLS1.2?

Fekete, Róbert robert.fekete at balabit.com
Wed Aug 24 19:37:35 CEST 2016


Hi,

You can find newer rpm packages at
https://copr.fedorainfracloud.org/coprs/czanik/

Regards,
Robert

On Wed, Aug 24, 2016 at 6:33 PM, PÁSZTOR György <
pasztor at linux.gyakg.u-szeged.hu> wrote:

> Hi,
>
> "Mark Mulligan" <MMulligan at llbean.com> írta 2016-08-24 15:57-kor:
> > We are using using syslog-ng 3.2.5 and I and trying to figure out how to
> configure it to use TLS1.2 rather than the TLS1.1.
> >
> > It is working for TLS1.1 but not for connections using TLS1.2, this is a
> snippet from our config file.
>
> How did you concluded that?
> What is the underlying openssl lib's version number?
> As far as I remember, without any extra config / modification, it use what
> the underlying lib uses, and that agrees on the latest protocol what both
> sides support.
> Later syslog-ng versions just bring in a new extra option, to set ssl
> flag, specifically for disabling specific ssl versions. That is the
> ssl-options which appeared in the syslog-ng 3.7 (?), and was later
> backported to the 3.6 line.
> There were also some discussion here about this topic, just some days ago.
>
> Cheers,
> Gyu
> ____________________________________________________________
> __________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation: http://www.balabit.com/support/documentation/?
> product=syslog-ng
> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20160824/d6c586bd/attachment.htm 


More information about the syslog-ng mailing list