My configure is: ./configure --prefix=/usr --enable-gnutls
The lines with nsd_gtls in the build log are as follows:
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -pthread -I../runtime -I.. -I/usr/include -I/usr/include -g -O2 -W -Wall -Wformat-security -Wshadow -Wcast-align -Wpointer-arith -Wmissing-format-attribute -g -MT lmnsd_gtls_la-nsd_gtls.lo -MD -MP -MF .deps/lmnsd_gtls_la-nsd_gtls.Tpo -c -o lmnsd_gtls_la-nsd_gtls.lo `test -f 'nsd_gtls.c' || echo './'`nsd_gtls.c
gcc -DHAVE_CONFIG_H -I. -I.. -pthread -I../runtime -I.. -I/usr/include -I/usr/include -g -O2 -W -Wall -Wformat-security -Wshadow -Wcast-align -Wpointer-arith -Wmissing-format-attribute -g -MT lmnsd_gtls_la-nsd_gtls.lo -MD -MP -MF .deps/lmnsd_gtls_la-nsd_gtls.Tpo -c nsd_gtls.c -fPIC -DPIC -o .libs/lmnsd_gtls_la-nsd_gtls.o
mv -f .deps/lmnsd_gtls_la-nsd_gtls.Tpo .deps/lmnsd_gtls_la-nsd_gtls.Plo
/bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -pthread -I../runtime -I.. -I/usr/include -I/usr/include -g -O2 -W -Wall -Wformat-security -Wshadow -Wcast-align -Wpointer-arith -Wmissing-format-attribute -g -MT lmnsd_gtls_la-nsdsel_gtls.lo -MD -MP -MF .deps/lmnsd_gtls_la-nsdsel_gtls.Tpo -c -o lmnsd_gtls_la-nsdsel_gtls.lo `test -f 'nsdsel_gtls.c' || echo './'`nsdsel_gtls.c
gcc -DHAVE_CONFIG_H -I. -I.. -pthread -I../runtime -I.. -I/usr/include -I/usr/include -g -O2 -W -Wall -Wformat-security -Wshadow -Wcast-align -Wpointer-arith -Wmissing-format-attribute -g -MT lmnsd_gtls_la-nsdsel_gtls.lo -MD -MP -MF .deps/lmnsd_gtls_la-nsdsel_gtls.Tpo -c nsdsel_gtls.c -fPIC -DPIC -o .libs/lmnsd_gtls_la-nsdsel_gtls.o
mv -f .deps/lmnsd_gtls_la-nsdsel_gtls.Tpo .deps/lmnsd_gtls_la-nsdsel_gtls.Plo
/bin/sh ../libtool --tag=CC --mode=link gcc -g -O2 -W -Wall -Wformat-security -Wshadow -Wcast-align -Wpointer-arith -Wmissing-format-attribute -g -module -avoid-version -o lmnsd_gtls.la -rpath /usr/lib/rsyslog lmnsd_gtls_la-nsd_gtls.lo lmnsd_gtls_la-nsdsel_gtls.lo -lgnutls
gcc -shared .libs/lmnsd_gtls_la-nsd_gtls.o .libs/lmnsd_gtls_la-nsdsel_gtls.o /usr/lib/libgnutls.so -L/usr/lib -Wl,-soname -Wl,lmnsd_gtls.so -o .libs/lmnsd_gtls.so
creating lmnsd_gtls.la
(cd .libs && rm -f lmnsd_gtls.la && ln -s ../lmnsd_gtls.la lmnsd_gtls.la)
My install log has these lines for nsd_gtls:
/bin/sh ../libtool --mode=install /usr/bin/install -c 'lmnsd_gtls.la' '/usr/lib/rsyslog/lmnsd_gtls.la'
/usr/bin/install -c .libs/lmnsd_gtls.so /usr/lib/rsyslog/lmnsd_gtls.so
/usr/bin/install -c .libs/lmnsd_gtls.lai /usr/lib/rsyslog/lmnsd_gtls.la
There are no error messages in the logs associated with these actions. And just to be thorough here are the config lines I'm using to set up TLS. It is in a file called TLS.conf which is included from rsyslog.conf via $IncludeConfig.
- Code: Select all
# setup TLS
$DefaultNetstreamDriver gtls
$DefaultNetstreamDriverCAFile /etc/ssl/certs/CA.pem
$DefaultNetstreamDriverCertFile /etc/ssl/certs/rsyslog.pem
$DefaultNetstreamDriverKeyFile /etc/ssl/private/rsyslog.key
$InputTCPServerStreamDriverAuthMode x509/name
$InputTCPServerStreamDriverPermittedPeer www.host1.com
$InputTCPServerStreamDriverPermittedPeer www.host2.com
$InputTCPServerStreamDriverMode 1 # TLS-only