Michael Biebl
34054198fe
Fix linker flags for librsyslog and rsyslogd
...
Use $(dl_libs) and $(rt_libs) instead of -ldl and -lrt. This ensures
that rsyslog can be successfully built on *BSD.
Don't like rsyslogd against $(dl_libs) and $(rt_libs) anymore. This
functionality is now in librsyslog.
Signed-off-by: Rainer Gerhards <rgerhards@adiscon.com>
2008-06-11 17:02:11 +02:00
Rainer Gerhards
8c0ac28fd9
fixed syntax error (typo in var name) and cleaup
2008-06-10 08:18:10 +02:00
Rainer Gerhards
2658319224
made rsyslog tickless in the (usual and default) case that repeated
...
message reduction is turned off.
More info: http://blog.gerhards.net/2008/06/coding-to-save-environment.html
2008-06-09 16:38:53 +02:00
Rainer Gerhards
55e01da2ec
somewhat improved plain tcp syslog reliability
...
...by doing a connection check before sending. Credits to Martin
Schuette for providing the idea. Details are available at
http://blog.gerhards.net/2008/06/reliable-plain-tcp-syslog-once-again.html
2008-06-09 12:40:54 +02:00
Rainer Gerhards
99e97dadf1
bugfix: removed some memory leaks in TLS code
2008-06-04 09:37:10 +02:00
Rainer Gerhards
cd2cee6de2
Merge branch 'ietf-tls'
2008-05-27 14:51:04 +02:00
Rainer Gerhards
492fb2ffe2
changed config directive name to reflect different use
...
$ActionSendStreamDriverCertFingerprint is now
$ActionSendStreamDriverPermittedPeer and can be used both for
fingerprint and name authentication (similar to the input side)
2008-05-22 18:58:04 +02:00
Rainer Gerhards
ff446070be
Merge branch 'ietf-tls'
...
Conflicts:
ChangeLog
2008-05-21 12:23:41 +02:00
varmojfekoj
6e97513eea
bugfix: default syslog port was no longer used if none was configured.
...
Signed-off-by: Rainer Gerhards <rgerhards@adiscon.com>
2008-05-21 12:08:23 +02:00
Rainer Gerhards
85b587f93d
first implementation of TLS server client authentication check
...
The TLS server now checks the client fingerprint. This works, but
is highly experimental. Needs to be refined for practice. Also:
- implemented permittedPeers helper construct to store names
- changed omfwd implementation to use new permittedPeers
2008-05-19 18:52:44 +02:00
Rainer Gerhards
edf41396ef
regained netstream driver genericity; improved drivers
...
- made action logic pass optional auth params only if they are
actually configured
- added new authMode and Fingerprint methods to ptcp netstream
driver (keeping them once again generic)
- added diagnostics messages when invalid auth modes were
configured
2008-05-17 11:19:12 +02:00
Rainer Gerhards
6ea98ec5ff
added first rough ability to authenticate the server against its certificate
...
This is very experimental and needs some more work. It probably even
segfaults - but the base code is there and running. The rest is
refinement.
While working on this, I did these two bugfixes:
- bugfix: small mem leak in omfwd on exit (strmdriver name was not freed)
- bugfix: $ActionSendStreamDriver had no effect
2008-05-16 18:26:25 +02:00
Rainer Gerhards
09afe64f29
added fromhost-ip properties and some bugfixes
...
- bugfix: TCP input modules did incorrectly set fromhost property
(always blank)
- bugfix: imklog did not set fromhost property
- added "fromhost-ip" property
- added "RSYSLOG_DebugFormat" canned template
- bugfix: hostname and fromhost were swapped when a persisted message
(in queued mode) was read in
2008-05-16 13:36:41 +02:00
Rainer Gerhards
3d74096021
added a bit of doc (at least something...)
2008-05-08 13:24:20 +02:00
Rainer Gerhards
664f7cab3f
added tool to show fingerprints
...
this is required for IETF I-D syslog-transport-tls-12. This is a very
rough first prototype
2008-05-08 13:21:09 +02:00
Rainer Gerhards
7abd7f3dc6
added simple shell script to support creating self-signed certs
...
this is necessary to comply to IETF I-D -syslog-transport-tls-12
2008-05-08 12:42:21 +02:00
Rainer Gerhards
773ec2bb0a
fixed problem with man pages thanks to Michael Biebl's help
2008-05-06 19:21:14 +02:00
Rainer Gerhards
7e4940e264
file dirty.h was missing - thanks to darix for pointing this out
2008-05-06 18:12:29 +02:00
Rainer Gerhards
e0a2745d3f
some cleanup (gotten rid of some more plain chars)
2008-05-06 15:05:39 +02:00
Rainer Gerhards
9e0af15a32
Merge branch 'tls'
2008-05-06 10:25:42 +02:00
Rainer Gerhards
62097331cc
invalid strdup when no driver name was set caused segfault
2008-05-05 14:34:13 +02:00
Rainer Gerhards
7022e9019e
support for different forwarding stream drivers added
...
they can now be set on an action-by-action basis
2008-05-05 14:19:12 +02:00
Rainer Gerhards
da88900143
added $InputTCPServerStreamDriverMode config directive
2008-04-30 18:53:21 +02:00
Rainer Gerhards
055d4ffc2a
fixed problem with module unload sequence
2008-04-29 15:36:22 +02:00
Rainer Gerhards
a3ff7eaf85
added $ActionSendStreamDriverMode config directive
2008-04-28 14:21:58 +02:00
Rainer Gerhards
434e404a6c
Merge branch 'klogd-bug'
2008-04-28 09:24:05 +02:00
Rainer Gerhards
858f1efd05
preparation for bughunt
...
including some cleanups
2008-04-28 09:21:07 +02:00
Rainer Gerhards
21bea2e1df
added forgotten file
2008-04-24 20:52:02 +02:00
Rainer Gerhards
4b05bef636
Merge branch 'sock-abstract' into tls
...
Conflicts:
runtime/Makefile.am
runtime/netstrm.c
runtime/nsd.h
runtime/nsd_ptcp.c
runtime/rsyslog.h
2008-04-24 17:43:45 +02:00
varmojfekoj
77b1cdf743
-c option no longer must be the first option
...
Thanks to varmjofekoj for the patch
Signed-off-by: Rainer Gerhards <rgerhards@adiscon.com>
2008-04-24 14:29:11 +02:00
Rainer Gerhards
1892fc75f9
added new netstrms class
...
netstrms is at the top layer of the socket abstraction
2008-04-23 15:07:19 +02:00
Rainer Gerhards
032b9c1f64
Merge branch 'master' into tls
2008-04-18 14:38:17 +02:00
Rainer Gerhards
08a4fc4ae5
bugfix: a recent change effectively disabled error messages
2008-04-18 14:35:27 +02:00
Rainer Gerhards
1daf8d492f
converted netstrm into generic netstrm and the nsd_pctp driver
2008-04-18 11:40:15 +02:00
Rainer Gerhards
ea4a3a3cd9
improvements in omfwd and cleanup of omgssapi
...
- some (small) cleanup of omgssapi
- optimized omfwed, now loads TCP code only if this is actually necessary
2008-04-17 19:03:51 +02:00
Rainer Gerhards
f590c1d52a
modified omfwd to work with netstrm (and also did some cleanup)
2008-04-17 18:06:06 +02:00
Rainer Gerhards
60309004df
completed better modularity of runtime
...
- added the ability to specify an error log function for the
runtime
- removed dependency of core runtime on dirty.h
Note that it is "better" modularity, not perfect. There is still
work to do, but I think we can for the time being proceed with
other things.
2008-04-17 12:46:57 +02:00
Rainer Gerhards
e5130affc0
moved "glblModPath" variable inside global data pool
...
(but still as a variable, not part of glbl object)
2008-04-17 11:17:15 +02:00
Rainer Gerhards
e1791996b8
moved host/domain-name related variables to global data pool
2008-04-17 10:58:30 +02:00
Rainer Gerhards
4824e56aed
moved "DisableDNS" variable to global data pool
2008-04-17 10:11:29 +02:00
Rainer Gerhards
911101ed26
moved "option_DisallowWarning" variable to global data pool
2008-04-17 09:54:10 +02:00
Rainer Gerhards
e16a207726
moved "bDropMalPTRMsgs" variable to global data pool
2008-04-17 09:40:41 +02:00
Rainer Gerhards
8c65706d22
moved "family" variable to global data pool
2008-04-17 09:25:03 +02:00
Rainer Gerhards
87c936ab65
modularization work
...
cleanup + created an abstract class for global data
items and moved glblGetWorkDir to it
2008-04-17 09:07:12 +02:00
Rainer Gerhards
bf3e0d4f22
prevented segfault during runtime library init phase
2008-04-16 18:01:26 +02:00
Rainer Gerhards
d071de5784
removed no longer needed things
...
... and some more cleanup. Also moved a file that I forgot
(thanks to Michael Biebl for pointing that out).
2008-04-16 15:45:13 +02:00
Rainer Gerhards
d9b0c77d3e
some more cleanup
...
reduced dependencies, moved non-runtime files to its own directory except
for some whom's status is unclear
2008-04-16 15:27:53 +02:00