[rsyslog] Help with relp with gtls config

[Rory Toma via rsyslog]

I have the following client and server configs. I am getting this error. I 
suspect my syntax isn't quite right here. What do I need to fix?

2020-12-30T19:42:31.881136+00:00 myx_00186139E3CC rsyslogd: 
omrelp[relp.domainname:114]: error 'TLS handshake failed [gnutls error -32: 
Insufficient credentials for that request.]', object  'conn to srvr 
relp.domainname:114' - action may not work as intended [v8.2012.0 try 
https://www.rsyslog.com/e/2353 ]
2020-12-30T19:42:31.881658+00:00 myx_00186139E3CC rsyslogd: 
omrelp[relp.domainname:114]: error 'error opening connection to remote peer', 
object  'conn to srvr relp.domainname:114' - action may not work as intended 
[v8.2012.0 try https://www.rsyslog.com/e/2353 ]

global(
        defaultNetStreamDriver="gtls"
        defaultNetStreamDriverCAFile="/etc/ca.pem"
        StreamDriverMode="1"
        action.reportSuspension="off"
        workDirectory="/opt/log/queue"
)

module(load="imklog" ConsoleLogLevel="1")
module(load="imfile")
module(load="imuxsock" SysSock.Name="/var/log/log")
module(load="omrelp")

action(
        type="omrelp"
        target="relp.domainname"
        port="114"
        tls="on"
        tls.caCert="/etc/ca.pem"
        tls.compression="on"
        tls.authmode="fingerprint"
        queue.type="LinkedList"
        queue.filename="rsyslog-fwd"
        action.resumeRetryCount="-1"
        queue.saveonshutdown="on"
        queue.maxDiskSpace="8182k"
)
action(type="omfile" File="/var/log/locallog")

and the following server config:

global(
        workDirectory="/export/rsyslog"
        defaultNetstreamDriver="gtls"
        defaultNetstreamDriverCAFile="/opt/rsyslog/certs/ca.pem"
        defaultNetstreamDriverKeyFile="/opt/rsyslog/certs/key.pem"
        defaultNetstreamDriverCertFile="/opt/rsyslog/certs/cert.pem"
)

module(load="impstats" interval="300" severity="7" 
log.file="/export/rsyslog/impstats.relp.114.log" log.syslog="off")
module(load="imrelp")

template(name="json_line" type="list" )
{
constant(value="{")
constant(value="\"time\":\"")
property(name="timegenerated" dateFormat="rfc3339" format="json" )
constant(value="\",\"msg\":\"")
property(name="msg" format="json")
constant(value="\",\"host\":\"")
property(name="hostname" format="json")
constant(value="\",\"svr\":\"")
property(name="syslogseverity-text" format="json")
constant(value="\",\"process\":\"")
property(name="programname" format="json")
constant(value="\",\"tag\":\"")
property(name="syslogtag" format="json")
constant(value="\",\"uuid\":\"")
property(name="uuid" format="json")
constant(value="\",\"rsyshost\":\"")
property(name="$myhostname" format="json")
constant(value="\"}")
}

input(type="imrelp" port="114" tls="on" tls.compression="on" 
tls.authmode="fingerprint")

action(
        type="omfwd"
        name="forward114"
        template="json_line"
        target="cortana-relay.corp.ooma.com"
        Port="9092"
        protocol="tcp"
        queue.type="linkedlist"
        queue.filename="forward114"
        action.resumeRetryCount="-1"
        queue.saveOnShutdown="on"
        queue.maxdiskspace="3G"
)
_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.