[syslog-ng] Extract SNI on incoming connections

László Várady (lvarady) Laszlo.Varady at oneidentity.com
Thu May 21 12:05:22 UTC 2020


Hi Raghu,

The server name indication extension can be set on the destination side with the sni(yes) option, but unfortunately, this field is currently not published as a macro on the server side, so it can not be used in the configuration.
Adding such a name-value pair in addition to .tls.x509_cn, x509_o, and x509_ou would be a good idea in my opinion.

--
László Várady
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.balabit.hu/pipermail/syslog-ng/attachments/20200521/24f8f076/attachment.html>


More information about the syslog-ng mailing list