Michael Biebl
b6b53972e1
Remove .cvsignore files, add .gitignore.
...
Signed-off-by: Rainer Gerhards <rgerhards@adiscon.com>
2008-06-11 17:03:47 +02:00
Michael Biebl
34054198fe
Fix linker flags for librsyslog and rsyslogd
...
Use $(dl_libs) and $(rt_libs) instead of -ldl and -lrt. This ensures
that rsyslog can be successfully built on *BSD.
Don't like rsyslogd against $(dl_libs) and $(rt_libs) anymore. This
functionality is now in librsyslog.
Signed-off-by: Rainer Gerhards <rgerhards@adiscon.com>
2008-06-11 17:02:11 +02:00
Rainer Gerhards
8c0ac28fd9
fixed syntax error (typo in var name) and cleaup
2008-06-10 08:18:10 +02:00
Rainer Gerhards
2658319224
made rsyslog tickless in the (usual and default) case that repeated
...
message reduction is turned off.
More info: http://blog.gerhards.net/2008/06/coding-to-save-environment.html
2008-06-09 16:38:53 +02:00
Rainer Gerhards
55e01da2ec
somewhat improved plain tcp syslog reliability
...
...by doing a connection check before sending. Credits to Martin
Schuette for providing the idea. Details are available at
http://blog.gerhards.net/2008/06/reliable-plain-tcp-syslog-once-again.html
2008-06-09 12:40:54 +02:00
Rainer Gerhards
cf51333f76
fixed a bug with the new property replacer option
...
there was a copy&paste error in the timereported
property - thanks to Elizabeth for reporting it
2008-06-07 11:01:13 +02:00
Rainer Gerhards
2687d0010c
added new property replacer option "time-subseconds"
...
enables to query just the subsecond part of a high-precision timestamp
2008-06-06 17:33:58 +02:00
Rainer Gerhards
6343cf730a
added doc on suggested TLS deployment
...
(rough picture, actual configuration sample still missing).
2008-06-06 15:43:14 +02:00
Rainer Gerhards
43c2f2b1ad
bumping version number
2008-06-06 11:37:55 +02:00
Rainer Gerhards
9c7207bb7b
preparing 3.19.6
2008-06-06 11:25:06 +02:00
Rainer Gerhards
eddaca33a8
enhanced property replacer to support multiple regex matches
2008-06-04 11:11:52 +02:00
Rainer Gerhards
99e97dadf1
bugfix: removed some memory leaks in TLS code
2008-06-04 09:37:10 +02:00
Rainer Gerhards
67d4f3c8f3
bugfix: off-by-one bug during certificate check
2008-06-04 08:21:08 +02:00
Rainer Gerhards
57daa3388c
bugfix: part of permittedPeer structure was not correctly initialized
...
thanks to varmojfekoj for spotting this
2008-06-03 18:40:55 +02:00
Rainer Gerhards
ca6e9efdfd
bumped version number
2008-05-30 17:16:02 +02:00
Rainer Gerhards
2b5c049ccc
finalized 3.19.5
2008-05-30 17:14:03 +02:00
Rainer Gerhards
6a815063f3
capability for replacement text in no match regex case added
...
implemented in property replacer: if a regular expression does not match,
it can now either return "**NO MATCH** (default, as before), a blank
property or the full original property text
2008-05-30 15:18:03 +02:00
Rainer Gerhards
99f18190a1
enhanced property replacer's regex to support submatches
...
- enabled Posix ERE expressions inside the property replacer
(previously BRE was permitted only)
- provided ability to specify that a regular expression submatch shall
be used inside the property replacer
2008-05-29 12:48:15 +02:00
Iida, Masanari
1644e9fabc
fixed typo
...
Typo caused confusion, because the database name is
case sensitive, but case was used different in the sample
and the database create script.
Signed-off-by: Rainer Gerhards <rgerhards@adiscon.com>
2008-05-28 15:37:22 +02:00
Rainer Gerhards
3cacb9c5a4
updated status document
2008-05-28 13:59:07 +02:00
Rainer Gerhards
eabc999530
bumped version number
2008-05-27 15:26:41 +02:00
Rainer Gerhards
0e03445b1f
finalized 3.19.4
2008-05-27 15:22:29 +02:00
Rainer Gerhards
cd2cee6de2
Merge branch 'ietf-tls'
2008-05-27 14:51:04 +02:00
Rainer Gerhards
531f27a8c3
implemented wildcards inside certificate name check authentication
2008-05-27 14:49:45 +02:00
Rainer Gerhards
ae387d6900
client now provides cert even if it is not signed by one of the server's trusted CAs (gtls)
2008-05-27 09:46:30 +02:00
Rainer Gerhards
331a644202
protected gtls error string function by a mutex.
...
Without it, we could have a race condition in extreme cases.
This was very remote, but now can no longer happen.
2008-05-26 15:49:32 +02:00
Rainer Gerhards
fce6ddc99f
fixed fingerprint generator
...
fixed problem introduced earlier today
2008-05-26 15:31:41 +02:00
Rainer Gerhards
7918bbe7fc
fixed wrong cert expiration date check
2008-05-26 15:11:00 +02:00
Rainer Gerhards
bc5eb93e40
added certificate validity date check (gtls)
2008-05-26 14:47:36 +02:00
Rainer Gerhards
b674dd69bd
added gtls name authentication based on common name (inside DN)
...
also changed fingerprint gtls auth mode to new format fingerprint
2008-05-26 12:53:49 +02:00
Rainer Gerhards
7b604269c7
added capability to auto-configure tls auth rule for client connecting to server
...
must match hostname in send action
2008-05-26 11:01:42 +02:00
Rainer Gerhards
f31a0537c6
improved gtls error reporting
2008-05-26 10:15:49 +02:00
Rainer Gerhards
3b5c252784
checking if client provided a cert and complain if not
2008-05-23 11:39:37 +02:00
Rainer Gerhards
b4baf2bda0
updated TLS documentation with HOWTO on certificate generation
2008-05-23 11:28:31 +02:00
Rainer Gerhards
492fb2ffe2
changed config directive name to reflect different use
...
$ActionSendStreamDriverCertFingerprint is now
$ActionSendStreamDriverPermittedPeer and can be used both for
fingerprint and name authentication (similar to the input side)
2008-05-22 18:58:04 +02:00
Rainer Gerhards
57b2032235
added x509/name authentication (so far based on dnsName only)
2008-05-22 18:48:09 +02:00
Rainer Gerhards
0b2e858a42
added code to pull the subjectAltName - dNSName
2008-05-21 18:18:20 +02:00
Rainer Gerhards
8c927a854e
fixed invalid prototype
2008-05-21 18:04:54 +02:00
Rainer Gerhards
76877065f6
bugfix: sender information (fromhost et al) was missing in imudp
...
thanks to sandiso for reporting this bug
2008-05-21 17:37:58 +02:00
Rainer Gerhards
d25586126f
Merge branch 'beta'
...
Conflicts:
ChangeLog
2008-05-21 16:55:11 +02:00
Rainer Gerhards
8f53b0f4d5
bugfix: imklog went into an endless loop if a PRI value was inside
...
a kernel log message
This is an unusual case under Linux, and a frequent one under BSD
2008-05-21 16:53:57 +02:00
Rainer Gerhards
68a2c3d512
implemented x509/certvalid "authentication"
2008-05-21 14:59:24 +02:00
Rainer Gerhards
297384275f
bumping version number
2008-05-21 12:46:07 +02:00
Rainer Gerhards
d7ae85c4ed
finalizing v3.19.3
2008-05-21 12:44:43 +02:00
Rainer Gerhards
ff446070be
Merge branch 'ietf-tls'
...
Conflicts:
ChangeLog
2008-05-21 12:23:41 +02:00
Tiziano Mueller
275595cdf8
bugfix: missing linker options caused build to fail on some systems.
...
Signed-off-by: Rainer Gerhards <rgerhards@adiscon.com>
2008-05-21 12:19:38 +02:00
varmojfekoj
6e97513eea
bugfix: default syslog port was no longer used if none was configured.
...
Signed-off-by: Rainer Gerhards <rgerhards@adiscon.com>
2008-05-21 12:08:23 +02:00
Rainer Gerhards
8cb6ec4cee
added some forgotten doc
2008-05-21 11:45:40 +02:00
Rainer Gerhards
350f28efd9
added new transport auth methods to doc set
2008-05-21 11:41:15 +02:00
Rainer Gerhards
cb8188da16
re-enabled anon mode (failed if client did not provide cert)
2008-05-21 11:04:01 +02:00
