On 10.11.21 18:49, Anton Khirnov wrote:
Quoting Michael Biebl (2021-11-10 18:27:29)Hi Anton,thanks for the details bug report and going the extra mile to verify it is still reproducible with testing. I quickly checked the upstream bug tracker, and found https://github.com/rsyslog/rsyslog/issues/4302 https://github.com/rsyslog/rsyslog/issues/4175 https://github.com/rsyslog/rsyslog/issues/3915 which look related to your problem. All issues with relp+gnutls All of them point to an issue with GnuTLS and the bug reporters mentioned that switching to OpenSSL fixed the issue. The Debian package is built with OpenSSL support. Would you mind testing if switching to OpenSSL fixes the issue for you?Great, switching to openssl seems to fix this.
Thanks for testing!
It's not great that gnutls is used by default though - the module is now borderline unusable with it.
[Looping in Rainer, as upstream of rsyslog]Rainer, is there a way to switch the default to OpenSSL if rsyslog has been built with GnuTLS and OpenSSL support?
I'm a bit wary of completely disabling GnuTLS support. Regards, Michael
OpenPGP_signature
Description: OpenPGP digital signature
