This bug has been migrated to another issue tracking site. It has been closed here and may no longer be being monitored.

If you would like to get updates for this issue, or to participate in it, you may do so at Red Hat Issue Tracker .
Bug 2080062 - [REBASE] Rebase rsyslog to 8.2108.0 or higher for streamDriver.CAFile
Summary: [REBASE] Rebase rsyslog to 8.2108.0 or higher for streamDriver.CAFile
Keywords:
Status: CLOSED MIGRATED
Alias: None
Product: Red Hat Enterprise Linux 9
Classification: Red Hat
Component: rsyslog
Version: CentOS Stream
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: rc
: ---
Assignee: Attila Lakatos
QA Contact: BaseOS QE Security Team
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2022-04-28 21:43 UTC by Pat Riehecky
Modified: 2023-08-01 11:44 UTC (History)
4 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2023-08-01 11:44:22 UTC
Type: Bug
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Issue Tracker   RHEL-937 0 None None None 2023-08-01 11:44:21 UTC
Red Hat Issue Tracker RHELPLAN-120447 0 None None None 2022-04-28 21:45:09 UTC
Red Hat Issue Tracker SECENGSP-4504 0 None None None 2022-04-28 21:45:11 UTC

Description Pat Riehecky 2022-04-28 21:43:22 UTC 
Description of problem:

Rsyslog 8.2108.0 introduced a setting `streamDriver.CAFile` which allows setting a CA for a specific connection.  This drastically cleans up streams using TLS.

Without this, you are required to set the global default ca which is inherited by everyone

Version-Release number of selected component (if applicable):rsyslog-8.2102.0-104.el9.x86_64


How reproducible: 100%


Steps to Reproduce:
1. Try to use streamDriver.CAFile
2.
3.

Actual results:
version of rsyslog is too old

Expected results:
Able to set the CA on the stream I'm telling to encrypt.

Additional info:
Comment 1 Attila Lakatos 2022-04-29 05:53:04 UTC 
Hello,

I agree that the mentioned enhancements are quite useful, especially when separate ca files are needed for different inputs/actions.

Thanks for the report.
Note You need to log in before you can comment on or make changes to this bug.