[EMAIL PROTECTED] schrieb:
> AFAIK certificates containing IP addresses are quite rare; host names
> are much common.  To support such situation -- while still avoiding
> dependency on DNS -- it would be useful if you could configure the IP
> address (used for opening the connection) and server name (compared
> against the certificate, but not looked up from DNS) separately.

Having the iPAddress inside the certificate solves this nicely, without 
additional configuration.

> I don't know what that would look like in your configuration file
> syntax, but maybe something like
> *.* @@192.0.2.1[syslogsrv2.example.com]

One question here: Why is it required to use hostnames only insted of 
the Distinguished Name of the certificate?

-- 
Martin
_______________________________________________
Syslog mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/syslog

Reply via email to