Hi all,
We are migrating from rsyslog v5 to v8
We have followed information for v5
$ModLoad imuxsock # local messages
$ModLoad imtcp # TCP listener
# make gtls driver the default
$DefaultNetstreamDriver gtls
# certificate files
$DefaultNetstreamDriverCAFile /rsyslog/protected/ca.pem
$DefaultNetstreamDriverCertFile /rsyslog/protected/machine-cert.pem
$DefaultNetstreamDriverKeyFile /rsyslog/protected/machine-key.pem
$InputTCPServerStreamDriverAuthMode x509/name
$InputTCPServerStreamDriverPermittedPeer *.example.net
$InputTCPServerStreamDriverMode 1 # run driver in TLS-only mode
$InputTCPServerRun 10514 # start up listener at port 10514
Now in rsyslogv8, we tried with above v5 config and setps in
https://www.rsyslog.com/doc/v8-stable/tutorials/tls_cert_server.html and
https://www.rsyslog.com/doc/v8-stable/tutorials/tls.html but got
rsyslogd: invalid or yet-unknown config file command
'InputTCPServerStreamDriverAuthMode' - have you forgotten to load a module?
[v8.34.0 try http://www.rsyslog.com/e/3003 ]
rsyslogd: invalid or yet-unknown config file command
'InputTCPServerStreamDriverPermittedPeer' - have you forgotten to load a
module? [v8.34.0 try http://www.rsyslog.com/e/3003 ]
rsyslogd: invalid or yet-unknown config file command
'InputTCPServerStreamDriverMode' - have you forgotten to load a module?
[v8.34.0 try http://www.rsyslog.com/e/3003 ]
rsyslogd: invalid or yet-unknown config file command
'InputTCPServerStreamDriverAuthMode' - have you forgotten to load a module?
[v8.34.0 try http://www.rsyslog.com/e/3003 ]
rsyslogd: invalid or yet-unknown config file command 'InputTCPServerRun' - have
you forgotten to load a module? [v8.34.0 try http://www.rsyslog.com/e/3003 ]
We tried with input(type="imtcp" port="10514") using example from
https://www.rsyslog.com/using-tls-with-relp/
rsyslogd: error during parsing file /etc/rsyslog.conf, on or before line 57:
parameter 'tls.permittedpeer' not known -- typo in config file? [v8.34.0 try
http://www.rsyslog.com/e/2207 ]
rsyslogd: error during parsing file /etc/rsyslog.conf, on or before line 57:
parameter 'tls.authMode' not known -- typo in config file? [v8.34.0 try
http://www.rsyslog.com/e/2207 ]
rsyslogd: error during parsing file /etc/rsyslog.conf, on or before line 57:
parameter 'tls.myPrivKey' not known -- typo in config file? [v8.34.0 try
http://www.rsyslog.com/e/2207 ]
rsyslogd: error during parsing file /etc/rsyslog.conf, on or before line 57:
parameter 'tls.myCert' not known -- typo in config file? [v8.34.0 try
http://www.rsyslog.com/e/2207 ]
rsyslogd: error during parsing file /etc/rsyslog.conf, on or before line 57:
parameter 'tls.caCert' not known -- typo in config file? [v8.34.0 try
http://www.rsyslog.com/e/2207 ]
rsyslogd: error during parsing file /etc/rsyslog.conf, on or before line 57:
parameter 'tls' not known -- typo in config file? [v8.34.0 try
http://www.rsyslog.com/e/2207 ]
Please advise how to tls configuration work in rsyslog V8.34? How to combine
https://www.rsyslog.com/doc/v8-stable/configuration/modules/imtcp.html#gnutlsprioritystring
?
Thanks.
Best Regards,
Mike Li
Confidentiality Notice:: This email, including attachments, may include
non-public, proprietary, confidential or legally privileged information. If
you are not an intended recipient or an authorized agent of an intended
recipient, you are hereby notified that any dissemination, distribution or
copying of the information contained in or transmitted with this e-mail is
unauthorized and strictly prohibited. If you have received this email in
error, please notify the sender by replying to this message and permanently
delete this e-mail, its attachments, and any copies of it immediately. You
should not retain, copy or use this e-mail or any attachment for any purpose,
nor disclose all or any part of the contents to any other person. Thank you.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
