谁能给我提示这个问题在哪里,
我无法加密从我的客户端机器到中央日志的日志文件,我不明白原因,我能得到任何相关信息吗?(我可以看到未加密的文件,向中央服务器(ngrep - 进出两者))
我正在使用的 Senario 已经创建了证书,该证书是 godaddy 的授权 CA。
客户端 rsyslog.conf:
$ModLoad imuxsock.so
$ModLoad imklog.so
$ModLoad imtcp
$DefaultNetstreamDriver gtls
# certificate files
$DefaultNetstreamDriverCAFile /rsyslog/pki/something.example.net.crt
$DefaultNetstreamDriverCertFile /rsyslog/pki/something.example.com.crt
$DefaultNetstreamDriverKeyFile /rsyslog/pki/something.example.com.key
$ActionSendStreamDriverAuthMode x509/name
$ActionSendStreamDriverMode 1
*.* @@machine.example.net:10514
异常:系统挂起,当我启用 defaultnetstreamDriver gtls
服务器 rsyslog.conf
$ModLoad ommysql
#$UDPServerRUn 514
$ModLoad immark # provides --MARK-- message capability
#$ModLoad imudp # provides UDP syslog reception
$ModLoad imtcp # provides TCP syslog reception
$ModLoad imgssapi # provides GSSAPI syslog reception
#$ModLoad imuxsock # provides support for local system logging (e.g. via logger command)
$ModLoad imklog # provides kernel logging support (previously done by rklogd)
$InputTCPServerRun 10514
*.* :ommysql:127.0.0.1,dbname,username,password
$DefaultNetstreamDriver gtls
# certificate files
$DefaultNetstreamDriverCAFile /var/www/html/rsyslog/ssl/something.example.net.crt
$DefaultNetstreamDriverCertFile /var/www/html/rsyslog/ssl/something.example.net.crt
$DefaultNetstreamDriverKeyFile /var/www/html/rsyslog/ssl/something.example.net.key
$ActionSendStreamDriverAuthMode anon
$ActionSendStreamDriverPermittedPeer *.example.net
$ActionSendStreamDriverMode 1