We have an existing rsyslog set up using TLS 1.2 We want to upgrade to TLS1.3 ONLY. I've read the other questions here, but when I set everything up, I get no logs.
The result of "openssl ciphers -v | awk '{print $2}' | sort -u" is:
SSLv3
TLSv1
TLSv1.2
TLSv1.3
In /etc/ssh/openssl.cnf I tried added both MinProtocol = TLSv1.3 and MaxProtocol = TLSv1.3.
My rsyslogd -v is:
rsyslogd 8.1901.0 (aka 2019.01) compiled with:
PLATFORM: x86_64-pc-linux-gnu
PLATFORM (lsb_release -d):
FEATURE_REGEXP: Yes
GSSAPI Kerberos 5 support: Yes
FEATURE_DEBUG (debug build, slow code): No
32bit Atomic operations supported: Yes
64bit Atomic operations supported: Yes
memory allocator: system default
Runtime Instrumentation (slow code): No
uuid support: Yes
systemd support: Yes
Number of Bits in RainerScript integers: 64
On the server side, my logserver.conf in /etc/rsyslog.d is:
$DefaultNetstreamDriver gtls
# certificate files
$DefaultNetstreamDriverCAFile /etc/rsyslog-keys/ca.pem
$DefaultNetstreamDriverCertFile /etc/rsyslog-keys/rsyslogServer-cert.pem
$DefaultNetstreamDriverKeyFile /etc/rsyslog-keys/rsyslogServer-key.pem
module(load="imtcp"
StreamDriver.mode="1"
StreamDriver.authmode="anon"
gnutlsprioritystring="SECURE128:-VERS-TLS-ALL:+VERS-TLS1.3"
)
Does anyone have any ideas about how I can force TLS 1.3 only on my system?
Asked by user1309220
(15 rep)
Apr 1, 2022, 01:25 PM
Last activity: Dec 21, 2022, 11:31 AM
Last activity: Dec 21, 2022, 11:31 AM