[syslog-ng] Syslog-ng mutual self cert authentication

PÁSZTOR György pasztor at linux.gyakg.u-szeged.hu
Tue Jan 12 12:31:32 CET 2016


Hi,

"Ivan Adji - Krstev" <akivanradix at gmail.com> írta 2016-01-12 12:08-kor:
> Can someone help me with this and tell me what im doing wrong ?

At a first glance, it seems, that you put the server's own CA to the
server's ca dir, and the client's ca into the client's ca dir.

The CA what you have created to sign the server's cert, should be on the
client's side, so the client should have the chance to validate the
server's cert, that it is signed with that.
And vica versa: the server should have that ca, which were used to sign the
client's cert, to valideate that signature.

Kind regards,
Gyu


More information about the syslog-ng mailing list