RSYSLOG force only TLS 1.3 version

Question

Debian: 10.10 rsyslog-gnutls: 8.1901.0-1 libgnutls: 30.6.7

I search in where path and name file insert this var "gnutlsPriorityString".

What is her path? And her Name file? to put this var "gnutlsPriorityString"?

My goal is the TLS only work with "TLS1.3" and I test with rsyslog client.

References links:

Hi! You seem to have forgotten to ask a question that we can answer. — Marcus Müller, Jul 02 '21 at 12:42
Hi! I search in where path and name file insert this var "gnutlsPriorityString". — CH06, Jul 02 '21 at 12:45
a) I must admit I don't understand the sentence, b) that sentence is not a question, could you make a sentence that ends in "?"? — Marcus Müller, Jul 02 '21 at 12:48

score 1 · Accepted Answer · answered Jul 07 '21 at 08:26

I found:

For Rsyslog 8.0 you need to put this gnutlsprioritystring="SECURE128:-VERS-TLS-ALL:+VERS-TLS1.3 when you load the icmp module, example:

module(load="imtcp"
        StreamDriver.mode="1"
        StreamDriver.authmode="anon"
        gnutlsprioritystring="SECURE128:-VERS-TLS-ALL:+VERS-TLS1.3"
)

Good Debug ;)

RSYSLOG force only TLS 1.3 version

1 Answers1