Sample Header Ad - 728x90

TLS 1.3 only for rsyslog on Debian and CentOS

1 vote
1 answer
1064 views
We have an existing rsyslog set up using TLS 1.2 We want to upgrade to TLS1.3 ONLY. I've read the other questions here, but when I set everything up, I get no logs. The result of "openssl ciphers -v | awk '{print $2}' | sort -u" is: SSLv3 TLSv1 TLSv1.2 TLSv1.3 In /etc/ssh/openssl.cnf I tried added both MinProtocol = TLSv1.3 and MaxProtocol = TLSv1.3. My rsyslogd -v is: rsyslogd 8.1901.0 (aka 2019.01) compiled with: PLATFORM: x86_64-pc-linux-gnu PLATFORM (lsb_release -d): FEATURE_REGEXP: Yes GSSAPI Kerberos 5 support: Yes FEATURE_DEBUG (debug build, slow code): No 32bit Atomic operations supported: Yes 64bit Atomic operations supported: Yes memory allocator: system default Runtime Instrumentation (slow code): No uuid support: Yes systemd support: Yes Number of Bits in RainerScript integers: 64 On the server side, my logserver.conf in /etc/rsyslog.d is: $DefaultNetstreamDriver gtls # certificate files $DefaultNetstreamDriverCAFile /etc/rsyslog-keys/ca.pem $DefaultNetstreamDriverCertFile /etc/rsyslog-keys/rsyslogServer-cert.pem $DefaultNetstreamDriverKeyFile /etc/rsyslog-keys/rsyslogServer-key.pem module(load="imtcp" StreamDriver.mode="1" StreamDriver.authmode="anon" gnutlsprioritystring="SECURE128:-VERS-TLS-ALL:+VERS-TLS1.3" ) Does anyone have any ideas about how I can force TLS 1.3 only on my system?
Asked by user1309220 (15 rep)
Apr 1, 2022, 01:25 PM
Last activity: Dec 21, 2022, 11:31 AM