Sorry, yes, meant 7.6.2 and have already attached notes from my first attempt to get (noauth)TLS+RELP working (didn't).
On Fri, Mar 21, 2014 at 1:36 PM, David Lang <[email protected]> wrote: > did you really mean 7.2.6 or did you mean 7.6.2 for the rsyslog version? > > David Lang > > On Fri, 21 Mar 2014, Xuri Nagarin wrote: > >> Date: Fri, 21 Mar 2014 12:09:09 -0700 >> From: Xuri Nagarin <[email protected]> >> Reply-To: rsyslog-users <[email protected]> >> To: rsyslog-users <[email protected]> >> Subject: Re: [rsyslog] could not load module '/lib64/rsyslog/imrelp.so >> (version 7.6.0) >> >> Working on this now. Expect to hear from me soon. What I will test: >> Client (rsyslog-7.2.6+relp1.2.5) -> Server (rsyslog-7.2.6+relp1.2.5) >> --- RELP+TLS with no auth/validation. >> >> >> >> On Fri, Mar 21, 2014 at 1:50 AM, Rainer Gerhards >> <[email protected]> wrote: >>> >>> On Thu, Mar 20, 2014 at 9:17 AM, Rainer Gerhards >>> <[email protected]>wrote: >>> >>>> On Fri, Mar 14, 2014 at 8:28 PM, Rainer Gerhards >>>> <[email protected] >>>>> >>>>> wrote: >>>> >>>> >>>>> Pls do. If you have a support contract, that simplifies things >>>>> cobsiderably :) >>>>> >>>>> >>>> Indeed, that simplified things as I thought. I was able to have a deep >>>> look at the code base yesterday ... and it thankfully turns out that it >>>> is >>>> actually quite unproblematic to disable certificate validation and then >>>> build with the old GnuTLS. >>>> >>>> I have already done some work in the regard (usually, when you dig deep >>>> to >>>> check things you also at the places where changes can be made ;)). I >>>> think >>>> we will release a new librelp version most probably today. The existing >>>> 7.6.2 rsyslog should be able to utilize this new librelp on RHEL6/CENTOS >>>> to >>>> work with TLS. It is just important that no TLS certificates are set. I >>>> would appreciate if someone could (independenlty) verify this once the >>>> version is out. I would then also update rsyslog, so that it emits >>>> better >>>> error messages in cases where certificate support is requested (7.6.2 >>>> does >>>> not know about this and thus can only emit a generic "something went >>>> wrong" >>>> message). >>>> >>>> >>> In case you haven't see: librelp 1.2.5 has been released and is available >>> from the repo. I would appreciate if you could try it out and see if it >>> works for your envrionment as well. If I don't hear back, we'll probably >>> release rsyslog 7.6.3 monday which provides more clear error messages in >>> the "no auth" case. Again, the new librelp together with current rsyslog >>> 7.6.2 permitted to use anon TLS in my environment. So there is no need to >>> wait for 7.6.3. >>> >>> Rainer >>> >>>> Rainer >>>> >>>>> Sent from phone, thus brief. >>>>> Am 14.03.2014 20:27 schrieb "Xuri Nagarin" <[email protected]>: >>>>> >>>>> Thanks Rainer. I am going to log cases via our support contract for >>>>>> >>>>>> tracking purposes. >>>>>> >>>>>> On Fri, Mar 14, 2014 at 12:20 PM, Rainer Gerhards >>>>>> <[email protected]> wrote: >>>>>>> >>>>>>> Pls give me until mid next week to check how much effort this is (i >>>>>> >>>>>> also >>>>>>> >>>>>>> need to talk to the windows folks). >>>>>>> >>>>>>> Rainer >>>>>>> >>>>>>> Sent from phone, thus brief. >>>>>>> Am 14.03.2014 20:07 schrieb "Xuri Nagarin" <[email protected]>: >>>>>>> >>>>>>>> Understood. For now, we would be happy with no cert validation so we >>>>>>>> can at least get the log streams encrypted and compressed over RELP. >>>>>>>> On a related note, I noticed that the RSyslog Windows agent does not >>>>>>>> have a "TLS" checkbox for RELP :) So we would have two requests - >>>>>>>> allow for TLS+RELP on the Windows agent and allow for RELP+TLS on >>>>>>>> RHEL6.x (with system gnutls 2.8.x) with limited certificate >>>>>>>> validation >>>>>>>> functionality. >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> On Fri, Mar 14, 2014 at 11:16 AM, Rainer Gerhards >>>>>>>> <[email protected]> wrote: >>>>>>>>> >>>>>>>>> While i like see support contracts being sold, be advised that it >>>>>> >>>>>> is >>>>>>>>> >>>>>>>>> pretty complex to replace the old gnutls. If you can throw some >>>>>> >>>>>> money at >>>>>>>>> >>>>>>>>> it, it would probably be a better idea to sponsor a capability >>>>>> >>>>>> downgrade >>>>>>>>> >>>>>>>>> that supports TLS with limited certificate check functionality. >>>>>> >>>>>> Getting >>>>>>>>> >>>>>>>>> the full functionality requires the new gnutls and while we can >>>>>> >>>>>> help with >>>>>>>>> >>>>>>>>> that, it still looks like quite some effort. >>>>>>>>> >>>>>>>>> Rainer >>>>>>>>> >>>>>>>>> Sent from phone, thus brief. >>>>>>>>> Am 14.03.2014 19:10 schrieb "Xuri Nagarin" <[email protected]>: >>>>>>>>> >>>>>>>>>> Still confused :( >>>>>>>>>> >>>>>>>>>> I guess I will try to use Adiscon paid support to get me a fix :) >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> On Fri, Mar 14, 2014 at 12:59 AM, Radu Gheorghe >>>>>>>>>> <[email protected]> wrote: >>>>>>>>>>> >>>>>>>>>>> Hi Xuri, >>>>>>>>>>> >>>>>>>>>>> RELP+TLS should work in the latest stable. I haven't tried it, >>>>>> >>>>>> I've >>>>>>>>>>> >>>>>>>>>>> upgraded from 7.4 (which isn't the latest stable). >>>>>>>>>>> >>>>>>>>>>> As far as I understand, RPMs from now on will get librelp with >>>>>>>>>>> disabled TLS support so you can get RELP (without TLS) working >>>>>> >>>>>> even if >>>>>>>>>>> >>>>>>>>>>> you have the "stock" GnuTLS 2.8. If you need RELP+TLS, I think >>>>>> >>>>>> you >>>>>>>>>>> >>>>>>>>>>> have to: >>>>>>>>>>> - install a newer GnuTLS >>>>>>>>>>> - compile librelp yourself >>>>>>>>>>> - profit :) >>>>>>>>>>> >>>>>>>>>>> Don't take my word for it, there's nothing I've actually tested >>>>>> >>>>>> from >>>>>>>>>>> >>>>>>>>>>> what I've said above. All I know is that with librelp 1.2.3 RPM >>>>>> >>>>>> and >>>>>>>>>>> >>>>>>>>>>> rsyslog 8.1.6 works with plain RELP (no TLS) and TCP+TLS, if you >>>>>> >>>>>> have >>>>>>>>>>> >>>>>>>>>>> GnuTLS 2.8 from CentOS 6.5. >>>>>>>>>>> >>>>>>>>>>> Best regards, >>>>>>>>>>> Radu >>>>>>>>>>> >>>>>>>>>>> On Fri, Mar 14, 2014 at 2:55 AM, Xuri Nagarin <[email protected] >>>>>>> >>>>>>> >>>>>>>> wrote: >>>>>>>>>>>> >>>>>>>>>>>> Building a GnuTLS 3.2 RPM from Fedora source RPM on RHEL 6.2 is >>>>>> >>>>>> a >>>>>>>>>>>> >>>>>>>>>>>> hassle because there are too many dependencies that need to be >>>>>>>>>>>> upgraded (if you want to stick with RPMs) >>>>>>>>>>>> >>>>>>>>>>>> $ rpmbuild -ba SPECS/gnutls.spec >>>>>>>>>>>> error: Failed build dependencies: >>>>>>>>>>>> p11-kit-devel >= 0.11 is needed by gnutls-3.2.12.1-1.el6.x86_64 >>>>>>>>>>>> libtasn1-devel >= 3.1 is needed by gnutls-3.2.12.1-1.el6.x86_64 >>>>>>>>>>>> texinfo is needed by gnutls-3.2.12.1-1.el6.x86_64 >>>>>>>>>>>> autogen-libopts-devel >= 5.18 is needed by >>>>>>>> >>>>>>>> gnutls-3.2.12.1-1.el6.x86_64 >>>>>>>>>>>> >>>>>>>>>>>> autogen is needed by gnutls-3.2.12.1-1.el6.x86_64 >>>>>>>>>>>> nettle-devel >= 2.7.1 is needed by gnutls-3.2.12.1-1.el6.x86_64 >>>>>>>>>>>> trousers-devel >= 0.3.11.2 is needed by >>>>>> >>>>>> gnutls-3.2.12.1-1.el6.x86_64 >>>>>>>>>>>> >>>>>>>>>>>> unbound-devel is needed by gnutls-3.2.12.1-1.el6.x86_64 >>>>>>>>>>>> unbound-libs is needed by gnutls-3.2.12.1-1.el6.x86_64 >>>>>>>>>>>> >>>>>>>>>>>> I am still confused about RELP + TLS - RedHat backported the >>>>>> >>>>>> vuln >>>>>>>>>>>> >>>>>>>>>>>> fixes to gnutls-2.8.x. Is the issue caused by rsyslog-relp 7.6 >>>>>> >>>>>> or >>>>>>>>>>>> >>>>>>>>>>>> older gnutls on RHEL? I see Radu's comment about needed to >>>>>> >>>>>> upgrade to >>>>>>>>>>>> >>>>>>>>>>>> Rsyslog 8.x to have the problem fixed but that means RELP+TLS is >>>>>>>>>>>> broken in latest stable release? >>>>>>>>>>>> >>>>>>>>>>>> Thanks, >>>>>>>>>>>> >>>>>>>>>>>> Xuri >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>> On Thu, Mar 13, 2014 at 1:59 PM, Xuri Nagarin < >>>>>> >>>>>> [email protected]> >>>>>>>>>> >>>>>>>>>> wrote: >>>>>>>>>>>>> >>>>>>>>>>>>> Re-building an RPM is easy. Trouble is going to be all the >>>>>> >>>>>> other >>>>>>>>>>>>> >>>>>>>>>>>>> packages on RHEL/CentOS that depend on gnutls-2.8. I am going >>>>>> >>>>>> to >>>>>>>>>>>>> >>>>>>>>>>>>> rebuild gnutls-3.2 as RPM on a test RHEL 6.2 box and see if the >>>>>>>>>>>>> upgrade is smooth. If yes, I will post how-to and source. >>>>>>>>>>>>> >>>>>>>>>>>>> Even so you need to be careful because future gnutls packages >>>>>> >>>>>> from >>>>>>>>>>>>> >>>>>>>>>>>>> RHEL/CentOS will want to replace your hand-rolled RPM. >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>> On Thu, Mar 13, 2014 at 1:51 AM, Anwar El fatayri >>>>>>>>>>>>> <[email protected]> wrote: >>>>>>>>>>>>>> >>>>>>>>>>>>>> Hey, >>>>>>>>>>>>>> Is there anyone who's willing to rebuild RPM's with a newer >>>>>> >>>>>> gnutls >>>>>>>>>> >>>>>>>>>> version in order to support TLS encryption over RELP (+ integrity >>>>>>>> >>>>>>>> checking >>>>>>>>>> >>>>>>>>>> with V7). >>>>>>>>>>>>>> >>>>>>>>>>>>>> I don't really know how to build RPM's (i never tried) but can >>>>>>>>>> >>>>>>>>>> someone give me a list of guidelines ?? >>>>>>>>>>>>>> >>>>>>>>>>>>>> Anwar >>>>>>>>>>>>>> >>>>>>>>>>>>>>> Date: Mon, 10 Mar 2014 14:39:18 +0200 >>>>>>>>>>>>>>> From: [email protected] >>>>>>>>>>>>>>> To: [email protected] >>>>>>>>>>>>>>> Subject: Re: [rsyslog] could not load module >>>>>>>>>> >>>>>>>>>> '/lib64/rsyslog/imrelp.so (version 7.6.0) >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> Hey Anwar, >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> I think you need 2.9 or later for RELP to work right now. >>>>>> >>>>>> You can >>>>>>>> >>>>>>>> see >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> in a previous Email step-by-step instructions on installing >>>>>> >>>>>> the >>>>>>>>>> >>>>>>>>>> latest >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> stable (3.2.12) which should make RELP work. >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> On Mon, Mar 10, 2014 at 2:34 PM, Anwar El fatayri >>>>>>>>>>>>>>> <[email protected]> wrote: >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> heyI installed gnutls-2.8.5-13.el6_5.x86_64.rpm but i >>>>>> >>>>>> still have >>>>>>>>>> >>>>>>>>>> the same problem. >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> Anwar >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> From: [email protected] >>>>>>>>>>>>>>>> To: [email protected] >>>>>>>>>>>>>>>> Subject: RE: [rsyslog] could not load module >>>>>>>>>> >>>>>>>>>> '/lib64/rsyslog/imrelp.so (version 7.6.0) >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> Date: Wed, 5 Mar 2014 10:53:20 +0100 >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> This is what i don't understand. I have it installed on my >>>>>>>> >>>>>>>> system : >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> [root@srv ~]# find / -name "*relp*"/lib64/rsyslog/ >>>>>>>>>> >>>>>>>>>> >>>>>>>> >>>>>> >>>>>> omrelp.so/lib64/rsyslog/imrelp.so/var/log/tls-relp/var/lib/yum/yumdb/r/bf49b26f76662f519a06e7e746a629f577f7a9ec-rsyslog-relp-7.6.0-1.el6-x86_64/var/lib/yum/yumdb/l/ed6186745fe50d049726724969cfac1e31fa70a8-librelp-1.2.2-1.el6-x86_64/elk/logstash-1.3.3/spec/inputs/relp.rb/elk/logstash-1.3.3/logstash/util/relp.rb/elk/logstash-1.3.3/logstash/inputs/relp.rb/usr/share/doc/librelp-1.2.2/usr/share/doc/librelp-1.2.2/relp.html/usr/lib64/librelp.so.0.0.0/usr/lib64/librelp.so.0 >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>> >>>>>>>> >>>>>> >>>>>> ============================================================================================================================================================= >>>>>>>>>> >>>>>>>>>> Package Arch >>>>>>>>>> Version Repository >>>>>>>>>> >>>>>>>> >>>>>> >>>>>> Size=============================================================================================================================================================Updating: >>>>>>>>>> >>>>>>>>>> rsyslog x86_64 >>>>>>>>>> 7.6.0-1.el6 rsyslog_v7 >>>>>>>>>> 726 kUpdating for dependencies: librelp >>>>>>>>>> x86_64 1.2.2-1.el6 >>>>>>>>>> rsyslog_v7 57 k rsyslog-gnutls >>>>>>>>>> x86_64 7.6.0-1.el6 >>>>>>>>>> rsyslog_v7 28 k rsyslog-relp >>>>>>>>>> x86_64 7.6.0-1.el6 >>>>>>>>>> rsyslog_v7 27 k >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> Transaction >>>>>>>>>> >>>>>>>>>> >>>>>>>> >>>>>> >>>>>> Summary============================================================================================================================================================= >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> and i still get this error :s ----> could not load module >>>>>>>>>> >>>>>>>>>> '/lib64/rsyslog/imrelp.so', dlopen: /usr/lib64/librelp.so.0: >>>>>> >>>>>> undefined >>>>>>>>>> >>>>>>>>>> symbol: gnutls_certificate_set_verify_function [try >>>>>>>>>> http://www.rsyslog.com/e/2066 ] >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> Date: Wed, 5 Mar 2014 11:36:59 +0200 >>>>>>>>>>>>>>>>> From: [email protected] >>>>>>>>>>>>>>>>> To: [email protected] >>>>>>>>>>>>>>>>> Subject: Re: [rsyslog] could not load module >>>>>>>>>> >>>>>>>>>> '/lib64/rsyslog/imrelp.so (version 7.6.0) >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> So you've installed rsyslog-relp and you have no file >>>>>> >>>>>> *relp.so >>>>>>>> >>>>>>>> in >>>>>>>>>> >>>>>>>>>> your >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> system? This means that either something is wrong with the >>>>>>>>>> >>>>>>>>>> package or >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> the way you search for that file. Or something else :) >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> Not sure where to go from here, really. Can you check the >>>>>>>> >>>>>>>> package >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> (unpack it) and run a `find / -name *relp.so`? >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> On Wed, Mar 5, 2014 at 11:13 AM, Anwar El fatayri >>>>>>>>>>>>>>>>> <[email protected]> wrote: >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> I installed the following yum repository : >>>>>>>>>>>>>>>>>> wget http://rpms.adiscon.com/v7-stable/rsyslog.repo -O >>>>>>>>>> >>>>>>>>>> /etc/yum.repos.d/rsyslog.repo >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> and the i updated rsyslog : >>>>>>>>>>>>>>>>>> yum update rsyslog >>>>>>>>>>>>>>>>>> I'm using CentOS 6.3 >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> From: [email protected] >>>>>>>>>>>>>>>>>>> To: [email protected] >>>>>>>>>>>>>>>>>>> Date: Wed, 5 Mar 2014 10:07:46 +0100 >>>>>>>>>>>>>>>>>>> Subject: Re: [rsyslog] could not load module >>>>>>>>>> >>>>>>>>>> '/lib64/rsyslog/imrelp.so (version 7.6.0) >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> yes i did : >>>>>>>>>>>>>>>>>>> Installed PackagesName : rsyslog-relpArch >>>>>> >>>>>> : >>>>>>>>>> >>>>>>>>>> x86_64Version : 7.6.0Release : 1.el6Size : 38 kRepo >>>>>>>> >>>>>>>> : >>>>>>>>>> >>>>>>>>>> installedFrom repo : rsyslog_v7Summary : RELP protocol >>>>>> >>>>>> support for >>>>>>>>>> >>>>>>>>>> rsyslogURL : http://www.rsyslog.com/License : (GPLv3+ >>>>>> >>>>>> and >>>>>>>> >>>>>>>> ASL >>>>>>>>>> >>>>>>>>>> 2.0)Description : The rsyslog-relp package contains the rsyslog >>>>>> >>>>>> plugins >>>>>>>>>> >>>>>>>>>> that provide : the ability to receive syslog messages >>>>>> >>>>>> via the >>>>>>>>>> >>>>>>>>>> reliable RELP : protocol. >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> Date: Tue, 4 Mar 2014 16:10:42 -0800 >>>>>>>>>>>>>>>>>>> From: [email protected] >>>>>>>>>>>>>>>>>>> To: [email protected] >>>>>>>>>>>>>>>>>>> Subject: Re: [rsyslog] could not load module >>>>>>>>>> >>>>>>>>>> '/lib64/rsyslog/imrelp.so (version 7.6.0) >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> did you install the rsyslog-relp package from that >>>>>>>> >>>>>>>> repository? >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> David Lang >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> On Tue, 4 Mar 2014, Anwar El fatayri wrote: >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> Date: Tue, 4 Mar 2014 18:17:23 +0100 >>>>>>>>>>>>>>>>>>>> From: Anwar El fatayri <[email protected]> >>>>>>>>>>>>>>>>>>>> Reply-To: rsyslog-users <[email protected]> >>>>>>>>>>>>>>>>>>>> To: rsyslog-users <[email protected]> >>>>>>>>>>>>>>>>>>>> Subject: Re: [rsyslog] could not load module >>>>>>>>>> >>>>>>>>>> '/lib64/rsyslog/imrelp.so >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> (version 7.6.0) >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> I left the company. Rsyslog is tryling to load the >>>>>> >>>>>> imrelp >>>>>>>>>> >>>>>>>>>> module from /usr/lib64/rsyslog/imrelp.so. I'm sure that it doesn't >>>>>> >>>>>> exist >>>>>>>>>> >>>>>>>>>> there but with the earlier version that i was using (v5) this >>>>>> >>>>>> wasn't the >>>>>>>>>> >>>>>>>>>> path to load the module. >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> I added the adiscon repository to /etc/yum.repos.d/ >>>>>> >>>>>> and >>>>>>>> >>>>>>>> then >>>>>>>>>> >>>>>>>>>> updated rsyslog to v7. After that, i recieved this error. >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> Date: Tue, 4 Mar 2014 18:31:08 +0200 >>>>>>>>>>>>>>>>>>>>> From: [email protected] >>>>>>>>>>>>>>>>>>>>> To: [email protected] >>>>>>>>>>>>>>>>>>>>> Subject: Re: [rsyslog] could not load module >>>>>>>>>> >>>>>>>>>> '/lib64/rsyslog/imrelp.so (version 7.6.0) >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> Do you have a file that matches *relp.so somewhere >>>>>> >>>>>> in >>>>>>>> >>>>>>>> your >>>>>>>>>> >>>>>>>>>> system? >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> On Tue, Mar 4, 2014 at 5:51 PM, Anwar El fatayri >>>>>>>>>>>>>>>>>>>>> <[email protected]> wrote: >>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>> i installed the package from the adiscon >>>>>> >>>>>> repository. >>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>> Installed PackagesName : rsyslogArch >>>>>> >>>>>> : >>>>>>>>>> >>>>>>>>>> x86_64Version : 7.6.0Release : 1.el6Size : 2.3 >>>>>>>>>> MRepo >>>>>>>>>> : installedFrom repo : rsyslog_v7Summary : a rocket-fast >>>>>> >>>>>> system >>>>>>>> >>>>>>>> for >>>>>>>>>> >>>>>>>>>> log processingURL : http://www.rsyslog.com/License : >>>>>>>> >>>>>>>> (GPLv3+ >>>>>>>>>> >>>>>>>>>> and ASL 2.0)Description : Rsyslog is an enhanced, multi-threaded >>>>>> >>>>>> syslog >>>>>>>>>> >>>>>>>>>> daemon. It supports MySQL, : syslog/TCP, RFC 3195, >>>>>> >>>>>> permitted >>>>>>>>>> >>>>>>>>>> sender lists, filtering on any message part, : and fine >>>>>> >>>>>> grain >>>>>>>>>> >>>>>>>>>> output format control. It is compatible with stock sysklogd >>>>>> >>>>>> : >>>>>>>>>> >>>>>>>>>> and can be used as a drop-in replacement. Rsyslog is simple to set >>>>>> >>>>>> up, >>>>>>>> >>>>>>>> with >>>>>>>>>> >>>>>>>>>> : advanced features suitable for enterprise-class, >>>>>>>>>> encryption-protected syslog : relay chains. >>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>> [root@serv ~]# yum info rsyslog-relpLoaded >>>>>> >>>>>> plugins: >>>>>>>>>> >>>>>>>>>> fastestmirror, prestoLoading mirror speeds from cached hostfile * >>>>>>>> >>>>>>>> atomic: >>>>>>>>>> >>>>>>>>>> mirrors.neusoft.edu.cn * base: fr2.rpmfind.net * extras: >>>>>>>>>> centos.quelquesmots.fr * updates: fr2.rpmfind.netInstalled >>>>>> >>>>>> PackagesName >>>>>>>>>> >>>>>>>>>> : rsyslog-relpArch : x86_64Version : 7.6.0Release >>>>>> >>>>>> : >>>>>>>>>> >>>>>>>>>> 1.el6Size : 38 kRepo : installedFrom repo : >>>>>>>>>> rsyslog_v7Summary : RELP protocol support for rsyslogURL >>>>>> >>>>>> : >>>>>>>>>> >>>>>>>>>> http://www.rsyslog.com/License : (GPLv3+ and ASL >>>>>> >>>>>> 2.0)Description : >>>>>>>>>> >>>>>>>>>> The rsyslog-relp package contains the rsyslog plugins that provide >>>>>>>>>> : the ability to receive syslog messages via the reliable RELP >>>>>>>>>> : protocol. >>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>> El Fatayri Anwar >>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>> Student in telecommunication systems & computer >>>>>>>>>> >>>>>>>>>> networksLinköping International University (LIU)Linköping - Sweden >>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>> +46 707 140 340 >>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>>> Date: Tue, 4 Mar 2014 17:43:17 +0200 >>>>>>>>>>>>>>>>>>>>>>> From: [email protected] >>>>>>>>>>>>>>>>>>>>>>> To: [email protected] >>>>>>>>>>>>>>>>>>>>>>> Subject: Re: [rsyslog] could not load module >>>>>>>>>> >>>>>>>>>> '/lib64/rsyslog/imrelp.so (version 7.6.0) >>>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>>> Hey Anwar, >>>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>>> Did you do --enable-relp when you compiled >>>>>> >>>>>> rsyslog? If >>>>>>>>>> >>>>>>>>>> you installed >>>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>>> from some packages, there is a rsyslog-relp >>>>>> >>>>>> package or >>>>>>>>>> >>>>>>>>>> something like >>>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>>> that. >>>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>>> On Tue, Mar 4, 2014 at 5:28 PM, Anwar El fatayri >>>>>>>>>>>>>>>>>>>>>>> <[email protected]> wrote: >>>>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>>>> Hey, >>>>>>>>>>>>>>>>>>>>>>>> I installed rsyslog v7-stable in order to setup >>>>>>>> >>>>>>>> rsyslog >>>>>>>>>> >>>>>>>>>> with a RELP TLS secured connection. However, i'm getting this >>>>>>>>>> error >>>>>>>> >>>>>>>> when i >>>>>>>>>> >>>>>>>>>> restart the rsyslog service : >>>>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>>>> could not load module '/lib64/rsyslog/imrelp.so', >>>>>>>>>> >>>>>>>>>> dlopen: /usr/lib64/librelp.so.0: undefined symbol: >>>>>>>>>> gnutls_certificate_set_verify_function [try >>>>>>>> >>>>>>>> http://www.rsyslog.com/e/2066] >>>>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>>>> I have librelp 1.2.2 installed on my machine. >>>>>>>>>>>>>>>>>>>>>>>> Thanks in advance >>>>>>>>>>>>>>>>>>>>>>>> Anwar >>>>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>>>> _______________________________________________ >>>>>>>>>>>>>>>>>>>>>>>> rsyslog mailing list >>>>>>>>>>>>>>>>>>>>>>>> >>>>>> http://lists.adiscon.net/mailman/listinfo/rsyslog >>>>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>>>> http://www.rsyslog.com/professional-services/ >>>>>>>>>>>>>>>>>>>>>>>> What's up with rsyslog? Follow >>>>>>>>>> >>>>>>>>>> https://twitter.com/rgerhards >>>>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>>>> NOTE WELL: This is a PUBLIC mailing list, posts >>>>>> >>>>>> are >>>>>>>>>> >>>>>>>>>> ARCHIVED by a myriad of sites beyond our control. PLEASE >>>>>> >>>>>> UNSUBSCRIBE >>>>>>>> >>>>>>>> and DO >>>>>>>>>> >>>>>>>>>> NOT POST if you DON'T LIKE THAT. >>>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>>> -- >>>>>>>>>>>>>>>>>>>>>>> Performance Monitoring * Log Analytics * Search >>>>>>>> >>>>>>>> Analytics >>>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>>> Solr & Elasticsearch Support * >>>>>> >>>>>> http://sematext.com/ >>>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>>> _______________________________________________ >>>>>>>>>>>>>>>>>>>>>>> rsyslog mailing list >>>>>>>>>>>>>>>>>>>>>>> http://lists.adiscon.net/mailman/listinfo/rsyslog >>>>>>>>>>>>>>>>>>>>>>> http://www.rsyslog.com/professional-services/ >>>>>>>>>>>>>>>>>>>>>>> What's up with rsyslog? Follow >>>>>>>>>> >>>>>>>>>> https://twitter.com/rgerhards >>>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>>> NOTE WELL: This is a PUBLIC mailing list, posts >>>>>> >>>>>> are > > > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of > sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T > LIKE THAT. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
