On Fri, Nov 16, 2018 at 11:14 AM Kumar G <[email protected]> wrote: > > Thank you Dan. > > I checked the URL and the authd TLS1.2 is available. However not able to > track down which source sends out the data over secure connection over UDP. >
ossec-agentd source is here: https://github.com/ossec/ossec-hids/tree/master/src/client-agent > If any one has done the data transmission over TLS 1.2, please help with code > modification. > > > Thanks > Kumar > > > On Fri 16 Nov, 2018, 1:22 AM dan (ddp), <[email protected]> wrote: >> >> On Thu, Nov 15, 2018 at 2:51 PM dan (ddp) <[email protected]> wrote: >> > >> > >> > On Thu, Nov 15, 2018 at 2:22 PM Kumar G <[email protected]> wrote: >> > > >> > > Hi Team. >> > > >> > > We have a requirement of getting all the agent to server communication >> > > to go over TLS 1.2. Could anyone help understand if we have feasibility >> > > of having the TLS 1.2 configurable for the agent communication for both >> > > agent registration (ossec-authd) and for the agent data that is being >> > > sent to Management server on UDP/1514. >> > > >> > >> > For authd: >> > https://github.com/ossec/ossec-hids/blob/master/src/os_auth/ssl.c#L107 >> > >> > > Does OSSEC agent data / events sent over DTLS (TLS1.2 on UDP) to Manager. >> > > >> > >> > Nope. >> > >> > > If you can shower any information on this, that would be great.Our >> > > current version is at 2.8.x. >> > > >> >> Oops, I didn't read that until after I hit send. No clue if that was >> present that long ago, >> but it should be easy to figure out based on my link above. >> >> > > >> > > Thanks >> > > Kumar >> > > >> > > -- >> > > >> > > --- >> > > You received this message because you are subscribed to the Google >> > > Groups "ossec-list" group. >> > > To unsubscribe from this group and stop receiving emails from it, send >> > > an email to [email protected]. >> > > For more options, visit https://groups.google.com/d/optout. >> >> -- >> >> --- >> You received this message because you are subscribed to the Google Groups >> "ossec-list" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected]. >> For more options, visit https://groups.google.com/d/optout. > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
