mirror of
https://github.com/rsyslog/rsyslog.git
synced 2025-12-16 05:10:40 +01:00
Andre lorbach
3d9b8df6fb
The new Option can have one of the following values: on = Expired certificates are allowed off = Expired certificates are not allowed warn = Expired certificates are allowed but warning will be logged (Default) Includes necessary tests to validate new code. closes https://github.com/rsyslog/rsyslog/issues/3364
73 lines
2.2 KiB
Bash
Executable File
73 lines
2.2 KiB
Bash
Executable File
#!/bin/bash
|
|
# rgerhards, 2011-04-04
|
|
# testing sending and receiving via TLS with anon auth using bare ipv6, no SNI
|
|
# This file is part of the rsyslog project, released under ASL 2.0
|
|
. ${srcdir:=.}/diag.sh init
|
|
. $srcdir/diag.sh check-ipv6-available
|
|
export NUMMESSAGES=25000
|
|
# uncomment for debugging support:
|
|
#export RSYSLOG_DEBUG="debug nostdout noprintmutexaction"
|
|
|
|
# start up the instances
|
|
export RSYSLOG_DEBUGLOG="log"
|
|
generate_conf
|
|
export PORT_RCVR="$(get_free_port)"
|
|
add_conf '
|
|
$ModLoad ../plugins/imtcp/.libs/imtcp
|
|
|
|
# certificates
|
|
$DefaultNetstreamDriverCAFile testsuites/x.509/ca.pem
|
|
$DefaultNetstreamDriverCertFile testsuites/x.509/client-cert.pem
|
|
$DefaultNetstreamDriverKeyFile testsuites/x.509/client-key.pem
|
|
|
|
$DefaultNetstreamDriver gtls # use gtls netstream driver
|
|
|
|
# then SENDER sends to this port (not tcpflood!)
|
|
$InputTCPServerStreamDriverMode 1
|
|
$InputTCPServerStreamDriverAuthMode anon
|
|
$InputTCPServerRun '$PORT_RCVR'
|
|
|
|
$template outfmt,"%msg:F,58:2%\n"
|
|
$template dynfile,"'$RSYSLOG_OUT_LOG'" # trick to use relative path names!
|
|
:msg, contains, "msgnum:" ?dynfile;outfmt
|
|
'
|
|
startup
|
|
export RSYSLOG_DEBUGLOG="log2"
|
|
#valgrind="valgrind"
|
|
generate_conf 2
|
|
export TCPFLOOD_PORT="$(get_free_port)" # TODO: move to diag.sh
|
|
add_conf '
|
|
global(
|
|
defaultNetstreamDriverCAFile="'$srcdir/tls-certs/ca.pem'"
|
|
defaultNetstreamDriverCertFile="'$srcdir/tls-certs/cert.pem'"
|
|
defaultNetstreamDriverKeyFile="'$srcdir/tls-certs/key.pem'"
|
|
defaultNetstreamDriver="gtls"
|
|
)
|
|
|
|
# Note: no TLS for the listener, this is for tcpflood!
|
|
$ModLoad ../plugins/imtcp/.libs/imtcp
|
|
$InputTCPServerRun '$TCPFLOOD_PORT'
|
|
|
|
# set up the action
|
|
$DefaultNetstreamDriver gtls # use gtls netstream driver
|
|
$ActionSendStreamDriverMode 1 # require TLS for the connection
|
|
$ActionSendStreamDriverAuthMode anon
|
|
*.* @@[::1]:'$PORT_RCVR'
|
|
' 2
|
|
startup 2
|
|
|
|
# now inject the messages into instance 2. It will connect to instance 1,
|
|
# and that instance will record the data.
|
|
tcpflood -m$NUMMESSAGES -i1
|
|
wait_file_lines
|
|
|
|
# shut down sender when everything is sent, receiver continues to run concurrently
|
|
shutdown_when_empty 2
|
|
wait_shutdown 2
|
|
# now it is time to stop the receiver as well
|
|
shutdown_when_empty
|
|
wait_shutdown
|
|
|
|
seq_check 1 $NUMMESSAGES
|
|
exit_test
|