diff options
| author | root <root@mail.bitbase.dk> | 2009-05-22 15:49:22 +0200 |
|---|---|---|
| committer | root <root@mail.bitbase.dk> | 2009-05-22 15:49:22 +0200 |
| commit | ddc0cd8da4a4a6c7607bf4f680e3283797c8872a (patch) | |
| tree | 4bd4fcf1ec123bd2105782062d42b58a3f812595 /rsyslog.d | |
| parent | fd39155673473cde65f10c12098392680b62d452 (diff) | |
| parent | 37f949dc3927dd3f24fd03f45e80de776ec2868e (diff) | |
Merge branch 'master' of git://source.jones.dk/local-COMMON
Diffstat (limited to 'rsyslog.d')
| -rw-r--r-- | rsyslog.d/local-gtls-common.conf | 21 | ||||
| -rw-r--r-- | rsyslog.d/local-gtls-receive.conf | 5 | ||||
| -rw-r--r-- | rsyslog.d/local-gtls-send.conf | 6 |
3 files changed, 32 insertions, 0 deletions
diff --git a/rsyslog.d/local-gtls-common.conf b/rsyslog.d/local-gtls-common.conf new file mode 100644 index 0000000..aef8117 --- /dev/null +++ b/rsyslog.d/local-gtls-common.conf @@ -0,0 +1,21 @@ +# enable gtls driver and make it the default +$ModLoad imtcp +$DefaultNetstreamDriver gtls + +# certificate files +$DefaultNetstreamDriverCAFile /etc/ssl/certs/ca-certificates.crt +$DefaultNetstreamDriverCertFile /etc/ssl/certs/rsyslog.pem +$DefaultNetstreamDriverKeyFile /etc/ssl/private/rsyslog.pem + +$InputTCPServerStreamDriverAuthMode x509/name +$InputTCPServerStreamDriverMode 1 # run driver in TLS-only mode + +# sample reception (repeat last line for each client) +#$InputTCPServerRun 514 +#$InputTCPServerStreamDriverPermittedPeer *.example.net + +# sample sending (repeat all lines for each server) +#$ActionSendStreamDriverAuthMode x509/name +#$ActionSendStreamDriverMode 1 # run driver in TLS-only mode +#$ActionSendStreamDriverPermittedPeer central.example.net +#*.* @@central.example.net:514 # forward everything to remote server diff --git a/rsyslog.d/local-gtls-receive.conf b/rsyslog.d/local-gtls-receive.conf new file mode 100644 index 0000000..b17d55a --- /dev/null +++ b/rsyslog.d/local-gtls-receive.conf @@ -0,0 +1,5 @@ +# enable gtls reception +$InputTCPServerRun 514 + +# restrict access based on client certificate +#$InputTCPServerStreamDriverPermittedPeer *.example.net diff --git a/rsyslog.d/local-gtls-send.conf b/rsyslog.d/local-gtls-send.conf new file mode 100644 index 0000000..e692b07 --- /dev/null +++ b/rsyslog.d/local-gtls-send.conf @@ -0,0 +1,6 @@ +# restrict access based on server certificate +# (repeat all lines for each server) +#$ActionSendStreamDriverAuthMode x509/name +#$ActionSendStreamDriverMode 1 # run driver in TLS-only mode +#$ActionSendStreamDriverPermittedPeer central.example.net +#*.* @@central.example.net:514 # forward everything to remote server |