4 Commits

Author SHA1 Message Date
aa17c24570 openssl: added link to doc for gnutlsPriorityString error msg
When openssl version is too old, a documention link will be added
to the error message now.

Also changed openssl too old check in testsuite
2019-10-08 15:36:28 +02:00
598eec659e tcpflood: Added support setting OpenSSL command parameters.
Also added a test based on imtcp-tls-ossl-basic.sh which tests
the new -k parameter with tcpflood called:
imtcp-tls-ossl-basic-tlscommands.sh

Fixed OpenSSL error reporting in tcpflood which was running into
a loop when OpenSSL error stack was printed out.
2019-04-12 12:45:20 +02:00
Rainer Gerhards
1c6c78edb2
openssl driver: clean up a bit 2019-04-12 08:45:30 +02:00
2f20fdd8c2 openssl network driver: Added support setting openssl configcommands
We are using the gnutlsPriorityString setting variable, to pass
configuration commands to openssl.
The format is one command per line, command and value separated by equal sign (=).
See this sample:
	gnutlsPriorityString="command=value
	secondcommand=value"

Also added a test that disables certain TLS/SSL Version through this parameter which
causes the connection within the test to fail due wrong tls version number.
This error is checked and if found the test will pass.

Support only on OpenSSL 1.02 or higher.
Testcase will log an error if OpenSSL Versions has not TLSv1.3 support.
This can be ignored. The tests works regardless of this logged error.

closes: https://github.com/rsyslog/rsyslog/issues/3605
2019-04-11 11:31:38 +02:00