On Fri, Mar 7, 2014 at 2:34 PM, Radu Gheorghe <[email protected]>wrote:
> Hi again, > > I'm starting a new thread because my problem is slightly different > than the original. And it's getting complicated. In fact, I'm pretty > confused, and I'd really like some guidance. Thanks in advance :) > > My goal is to set up rsyslog with both TCP+TLS and RELP (no TLS. yet.) > > The problem seems to be that I can't make them both work at the same > time. imrelp.so requires a new version of GnuTLS, and lmnsd_gtls.so > (required by TCP+TLS) works with the old version but not the new one. > > ######details of the problem##### > I'm running: > - rsyslog 8.1.6 > - OS: CentOS 6.5 (updated just now) > - GnuTLS (comes with the OS): 2.8.5_13 (the one with the infamous > security bug fixed!) > > In this setup, I can't get RELP to work, like in the original thread: > rsyslogd: could not load module '/lib64/rsyslog/imrelp.so', dlopen: > /usr/lib64/librelp.so.0: undefined symbol: > gnutls_certificate_set_verify_function [try > http://www.rsyslog.com/e/2066 ] > > OK, so I installed the latest stable (3.2.12), like you see below. > Still doesn't work, because rsyslog seems to be looking for the > library on the system (/usr/lib64/libgnutls.so.26). So I do a hack to > link the new library in there: > mv /usr/lib64/libgnutls.so.26 /usr/lib64/libgnutls.so.26_old > ln -s /usr/local/lib/libgnutls.so /usr/lib64/libgnutls.so.26 # note > that libgnutls.so points to libgnutls.so.28.30.2, so 28 instead of 26 > > At his point, RELP works. Yeey! But now lmnsd_gtls.so complains: > rsyslogd: could not load module '/lib64/rsyslog/lmnsd_gtls.so', > dlopen: /lib64/rsyslog/lmnsd_gtls.so: undefined symbol: gcry_control > [try http://www.rsyslog.com/e/2066 ] > I guess you have forgotten to run ./configure after installing the new gnutls version. The function in questiond (gcry_control) is only called by rsyslog if GnutTLS is <= 2.11, see: https://github.com/rsyslog/rsyslog/blob/v7-stable/runtime/nsd_gtls.c#L582 So this is a strong indication something is wrong with your build. Rainer _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
