HI,
I am setting up rsyslog as a aggregator from multiple clients using TLS
with mutual authentication between the server and the client machines. I
would like to add data from the client's certificate (namely the subject
or subjectAltName) into the log message.
I know I can add the fromhost-ip into the log message, and even the
hostname, but I want to grab data from the certificate (because that's
something I know is stable and something in my control, whereas the IP and
hostname might get changed by the client).
Is there some way to collect that information from the certificate and add
it into a log template? I've been searching and couldn't find any way to
gather that information.
I am running 8.2204.1
Thanks,
-derek
--
Derek Atkins 617-623-3745
derek@ihtfp.com www.ihtfp.com
Computer and Internet Security Consultant
_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
I am setting up rsyslog as a aggregator from multiple clients using TLS
with mutual authentication between the server and the client machines. I
would like to add data from the client's certificate (namely the subject
or subjectAltName) into the log message.
I know I can add the fromhost-ip into the log message, and even the
hostname, but I want to grab data from the certificate (because that's
something I know is stable and something in my control, whereas the IP and
hostname might get changed by the client).
Is there some way to collect that information from the certificate and add
it into a log template? I've been searching and couldn't find any way to
gather that information.
I am running 8.2204.1
Thanks,
-derek
--
Derek Atkins 617-623-3745
derek@ihtfp.com www.ihtfp.com
Computer and Internet Security Consultant
_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.