We have the same log messages and are using it in the same way. We have a story in the backlog to investigate, but haven't got to it yet. It doesn't seem to be losing messages.

On 12/13/2016 03:31 PM, yingchun cai via rsyslog wrote:

Hi,  All
I use rsyslog-gnutls-8.23.0-1.el6.x86_64rsyslog-8.23.0-1.el6.x86_64and configured with 
TLS connection. I configured with imptcp as non-tls connection for one port and configure 
imtcp as tls connection on another port.  However,  I do get this error message in the 
log: "rsyslogd: gnutls returned error on handshake: A TLS packet with unexpected 
length was received.  [v8.23.0 try http://www.rsyslog.com/e/2083 ]".
Here is the configuration I have for rsyslog:module(load="imudp")input(type="imudp" 
port="514")module(load="imptcp")input(type="imptcp" port="514")
# Provides TCP syslog reception# for parameters see 
http://www.rsyslog.com/doc/imtcp.htmlmodule(load="imtcp"streamdriver.mode="1"streamdriver.authmode="x509/name"PermittedPeer="*")input(type="imtcp"
 port="2514" name="tcp-tls")
$DefaultNetstreamDriver gtls$DefaultNetstreamDriverCAFile 
/opt/sec/certs/xxxx$DefaultNetstreamDriverCertFile 
/opt/sec/certs/app_cert.pem$DefaultNetstreamDriverKeyFile 
/opt/sec/keys/app.key$ActionSendStreamDriverAuthMode 
x509/name$ActionSendStreamDriverPermittedPeer *
Anyone has any idea why I got this error?
thanks
Yingchun
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.


_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.

Reply via email to