47 Commits

Author SHA1 Message Date
Michael Biebl
34054198fe Fix linker flags for librsyslog and rsyslogd
Use $(dl_libs) and $(rt_libs) instead of -ldl and -lrt. This ensures
that rsyslog can be successfully built on *BSD.

Don't like rsyslogd against $(dl_libs) and $(rt_libs) anymore. This
functionality is now in librsyslog.

Signed-off-by: Rainer Gerhards <rgerhards@adiscon.com>
2008-06-11 17:02:11 +02:00
Rainer Gerhards
8c0ac28fd9 fixed syntax error (typo in var name) and cleaup 2008-06-10 08:18:10 +02:00
Rainer Gerhards
2658319224 made rsyslog tickless in the (usual and default) case that repeated
message reduction is turned off.

More info: http://blog.gerhards.net/2008/06/coding-to-save-environment.html
2008-06-09 16:38:53 +02:00
Rainer Gerhards
55e01da2ec somewhat improved plain tcp syslog reliability
...by doing a connection check before sending. Credits to Martin
Schuette for providing the idea. Details are available at
http://blog.gerhards.net/2008/06/reliable-plain-tcp-syslog-once-again.html
2008-06-09 12:40:54 +02:00
Rainer Gerhards
99e97dadf1 bugfix: removed some memory leaks in TLS code 2008-06-04 09:37:10 +02:00
Rainer Gerhards
cd2cee6de2 Merge branch 'ietf-tls' 2008-05-27 14:51:04 +02:00
Rainer Gerhards
492fb2ffe2 changed config directive name to reflect different use
$ActionSendStreamDriverCertFingerprint is now
$ActionSendStreamDriverPermittedPeer and can be used both for
fingerprint and name authentication (similar to the input side)
2008-05-22 18:58:04 +02:00
Rainer Gerhards
ff446070be Merge branch 'ietf-tls'
Conflicts:

	ChangeLog
2008-05-21 12:23:41 +02:00
varmojfekoj
6e97513eea bugfix: default syslog port was no longer used if none was configured.
Signed-off-by: Rainer Gerhards <rgerhards@adiscon.com>
2008-05-21 12:08:23 +02:00
Rainer Gerhards
85b587f93d first implementation of TLS server client authentication check
The TLS server now checks the client fingerprint. This works, but
is highly experimental. Needs to be refined for practice. Also:
- implemented permittedPeers helper construct to store names
- changed omfwd implementation to use new permittedPeers
2008-05-19 18:52:44 +02:00
Rainer Gerhards
edf41396ef regained netstream driver genericity; improved drivers
- made action logic pass optional auth params only if they are
  actually configured
- added new authMode and Fingerprint methods to ptcp netstream
  driver (keeping them once again generic)
- added diagnostics messages when invalid auth modes were
  configured
2008-05-17 11:19:12 +02:00
Rainer Gerhards
6ea98ec5ff added first rough ability to authenticate the server against its certificate
This is very experimental and needs some more work. It probably even
segfaults - but the base code is there and running. The rest is
refinement.

While working on this, I did these two bugfixes:
- bugfix: small mem leak in omfwd on exit (strmdriver name was not freed)
- bugfix: $ActionSendStreamDriver had no effect
2008-05-16 18:26:25 +02:00
Rainer Gerhards
09afe64f29 added fromhost-ip properties and some bugfixes
- bugfix: TCP input modules did incorrectly set fromhost property
  (always blank)
- bugfix: imklog did not set fromhost property
- added "fromhost-ip" property
- added "RSYSLOG_DebugFormat" canned template
- bugfix: hostname and fromhost were swapped when a persisted message
  (in queued mode) was read in
2008-05-16 13:36:41 +02:00
Rainer Gerhards
3d74096021 added a bit of doc (at least something...) 2008-05-08 13:24:20 +02:00
Rainer Gerhards
664f7cab3f added tool to show fingerprints
this is required for IETF I-D syslog-transport-tls-12. This is a very
rough first prototype
2008-05-08 13:21:09 +02:00
Rainer Gerhards
7abd7f3dc6 added simple shell script to support creating self-signed certs
this is necessary to comply to IETF I-D -syslog-transport-tls-12
2008-05-08 12:42:21 +02:00
Rainer Gerhards
773ec2bb0a fixed problem with man pages thanks to Michael Biebl's help 2008-05-06 19:21:14 +02:00
Rainer Gerhards
7e4940e264 file dirty.h was missing - thanks to darix for pointing this out 2008-05-06 18:12:29 +02:00
Rainer Gerhards
e0a2745d3f some cleanup (gotten rid of some more plain chars) 2008-05-06 15:05:39 +02:00
Rainer Gerhards
9e0af15a32 Merge branch 'tls' 2008-05-06 10:25:42 +02:00
Rainer Gerhards
62097331cc invalid strdup when no driver name was set caused segfault 2008-05-05 14:34:13 +02:00
Rainer Gerhards
7022e9019e support for different forwarding stream drivers added
they can now be set on an action-by-action basis
2008-05-05 14:19:12 +02:00
Rainer Gerhards
da88900143 added $InputTCPServerStreamDriverMode config directive 2008-04-30 18:53:21 +02:00
Rainer Gerhards
055d4ffc2a fixed problem with module unload sequence 2008-04-29 15:36:22 +02:00
Rainer Gerhards
a3ff7eaf85 added $ActionSendStreamDriverMode config directive 2008-04-28 14:21:58 +02:00
Rainer Gerhards
434e404a6c Merge branch 'klogd-bug' 2008-04-28 09:24:05 +02:00
Rainer Gerhards
858f1efd05 preparation for bughunt
including some cleanups
2008-04-28 09:21:07 +02:00
Rainer Gerhards
21bea2e1df added forgotten file 2008-04-24 20:52:02 +02:00
Rainer Gerhards
4b05bef636 Merge branch 'sock-abstract' into tls
Conflicts:

	runtime/Makefile.am
	runtime/netstrm.c
	runtime/nsd.h
	runtime/nsd_ptcp.c
	runtime/rsyslog.h
2008-04-24 17:43:45 +02:00
varmojfekoj
77b1cdf743 -c option no longer must be the first option
Thanks to varmjofekoj for the patch

Signed-off-by: Rainer Gerhards <rgerhards@adiscon.com>
2008-04-24 14:29:11 +02:00
Rainer Gerhards
1892fc75f9 added new netstrms class
netstrms is at the top layer of the socket abstraction
2008-04-23 15:07:19 +02:00
Rainer Gerhards
032b9c1f64 Merge branch 'master' into tls 2008-04-18 14:38:17 +02:00
Rainer Gerhards
08a4fc4ae5 bugfix: a recent change effectively disabled error messages 2008-04-18 14:35:27 +02:00
Rainer Gerhards
1daf8d492f converted netstrm into generic netstrm and the nsd_pctp driver 2008-04-18 11:40:15 +02:00
Rainer Gerhards
ea4a3a3cd9 improvements in omfwd and cleanup of omgssapi
- some (small) cleanup of omgssapi
- optimized omfwed, now loads TCP code only if this is actually necessary
2008-04-17 19:03:51 +02:00
Rainer Gerhards
f590c1d52a modified omfwd to work with netstrm (and also did some cleanup) 2008-04-17 18:06:06 +02:00
Rainer Gerhards
60309004df completed better modularity of runtime
- added the ability to specify an error log function for the
  runtime
- removed dependency of core runtime on dirty.h

Note that it is "better" modularity, not perfect. There is still
work to do, but I think we can for the time being proceed with
other things.
2008-04-17 12:46:57 +02:00
Rainer Gerhards
e5130affc0 moved "glblModPath" variable inside global data pool
(but still as a variable, not part of glbl object)
2008-04-17 11:17:15 +02:00
Rainer Gerhards
e1791996b8 moved host/domain-name related variables to global data pool 2008-04-17 10:58:30 +02:00
Rainer Gerhards
4824e56aed moved "DisableDNS" variable to global data pool 2008-04-17 10:11:29 +02:00
Rainer Gerhards
911101ed26 moved "option_DisallowWarning" variable to global data pool 2008-04-17 09:54:10 +02:00
Rainer Gerhards
e16a207726 moved "bDropMalPTRMsgs" variable to global data pool 2008-04-17 09:40:41 +02:00
Rainer Gerhards
8c65706d22 moved "family" variable to global data pool 2008-04-17 09:25:03 +02:00
Rainer Gerhards
87c936ab65 modularization work
cleanup + created an abstract class for global data
items and moved glblGetWorkDir to it
2008-04-17 09:07:12 +02:00
Rainer Gerhards
bf3e0d4f22 prevented segfault during runtime library init phase 2008-04-16 18:01:26 +02:00
Rainer Gerhards
d071de5784 removed no longer needed things
... and some more cleanup. Also moved a file that I forgot
(thanks to Michael Biebl for pointing that out).
2008-04-16 15:45:13 +02:00
Rainer Gerhards
d9b0c77d3e some more cleanup
reduced dependencies, moved non-runtime files to its own directory except
for some whom's status is unclear
2008-04-16 15:27:53 +02:00