Mailing List Archive: Rsyslog TLS Integration Issues

Rsyslog TLS Integration Issues

Jul 25, 2022, 1:34 AM

Post #1 of 4 (378 views)

Hi,

We have built rsyslog with TLS support (--enable-gnutls) and its working
fine (able to send traffic via TLS channel) as a daemon.

However, when we do rsyslog -N 2, it throws an error

rsyslogd: malloc.c:2406: sysmalloc: Assertion `(old_top == initial_top
(av) && old_size == 0) || ((unsigned long) (old_size) >= MINSIZE &&
prev_inuse (old_top) && ((unsigned long) old_end & (pagesize - 1)) ==
0)' failed.
Aborted

rajesh.kaki@test-ip:/etc/rsyslog.d$ echo $?
134

Even when running rsyslog in debugging/interactive mode, rsyslog -dn seems
to have issue

Next token is token ')' ()
Shifting token ')' ()
Entering state 140
Reducing stack by rule 67 (line 225):
$1 = token FUNC ()
$2 = token '(' ()
$3 = nterm fparams ()
$4 = token ')' ()
7801.689854056:main thread : Called LogMsg, msg: error during
parsing file /etc/rsyslog.d/40-dyn_stats.conf, on or before line 148:
exec_template(): template 'relay.internal.metric' could not be found
rsyslogd: malloc.c:2406: sysmalloc: Assertion `(old_top == initial_top
(av) && old_size == 0) || ((unsigned long) (old_size) >= MINSIZE &&
prev_inuse (old_top) && ((unsigned long) old_end & (pagesize - 1)) ==
0)' failed.
Aborted

How come it's working in background mode and not working in interactive or
other modes?
(Rsyslog version - 8.27.0, debian 9 stretch)

--
Regards,
Rajesh KSV
_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.

Re: Rsyslog TLS Integration Issues [ In reply to ]

rsyslog at lists

Jul 25, 2022, 4:56 AM

Post #2 of 4 (378 views)

Permalink

Hi.

On 25.07.22 10:34, rajeshksv via rsyslog wrote:
> Hi,
>
> We have built rsyslog with TLS support (--enable-gnutls) and its working
> fine (able to send traffic via TLS channel) as a daemon.
>
> However, when we do rsyslog -N 2, it throws an error
>
> rsyslogd: malloc.c:2406: sysmalloc: Assertion `(old_top == initial_top
> (av) && old_size == 0) || ((unsigned long) (old_size) >= MINSIZE &&
> prev_inuse (old_top) && ((unsigned long) old_end & (pagesize - 1)) ==
> 0)' failed.
> Aborted
>
>
> rajesh.kaki@test-ip:/etc/rsyslog.d$ echo $?
> 134
>
>
> Even when running rsyslog in debugging/interactive mode, rsyslog -dn seems
> to have issue
>
> Next token is token ')' ()
> Shifting token ')' ()
> Entering state 140
> Reducing stack by rule 67 (line 225):
> $1 = token FUNC ()
> $2 = token '(' ()
> $3 = nterm fparams ()
> $4 = token ')' ()
> 7801.689854056:main thread : Called LogMsg, msg: error during
> parsing file /etc/rsyslog.d/40-dyn_stats.conf, on or before line 148:
> exec_template(): template 'relay.internal.metric' could not be found

Is anywhere in your system the template "relay.internal.metric" defined?
Maybe this gh issue helps for further debugging.

https://github.com/rsyslog/rsyslog/issues/1434

> rsyslogd: malloc.c:2406: sysmalloc: Assertion `(old_top == initial_top
> (av) && old_size == 0) || ((unsigned long) (old_size) >= MINSIZE &&
> prev_inuse (old_top) && ((unsigned long) old_end & (pagesize - 1)) ==
> 0)' failed.
> Aborted
>
>
> How come it's working in background mode and not working in interactive or
> other modes?
> (Rsyslog version - 8.27.0, debian 9 stretch)

Why not using a more recent version as this version is from 2017?

https://www.rsyslog.com/downloads/download-other/
8.27.0 2017-05-16

https://www.rsyslog.com/news-releases/

Regards
Alex
_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.

Re: Rsyslog TLS Integration Issues [ In reply to ]

rsyslog at lists

Jul 25, 2022, 7:28 AM

Post #3 of 4 (378 views)

Permalink

there have been a lot of TLS fixes int he last year, anything prior to about
april 2022 has known bugs.

David Lang
On Mon, 25 Jul 2022, Alex via rsyslog wrote:

> Date: Mon, 25 Jul 2022 13:56:02 +0200
> From: Alex via rsyslog <rsyslog@lists.adiscon.com>
> To: rsyslog-users <rsyslog@lists.adiscon.com>
> Cc: Alex <al-rsyslog@none.at>
> Subject: Re: [rsyslog] Rsyslog TLS Integration Issues
>
> Hi.
>
> On 25.07.22 10:34, rajeshksv via rsyslog wrote:
>> Hi,
>>
>> We have built rsyslog with TLS support (--enable-gnutls) and its working
>> fine (able to send traffic via TLS channel) as a daemon.
>>
>> However, when we do rsyslog -N 2, it throws an error
>>
>> rsyslogd: malloc.c:2406: sysmalloc: Assertion `(old_top == initial_top
>> (av) && old_size == 0) || ((unsigned long) (old_size) >= MINSIZE &&
>> prev_inuse (old_top) && ((unsigned long) old_end & (pagesize - 1)) ==
>> 0)' failed.
>> Aborted
>>
>>
>> rajesh.kaki@test-ip:/etc/rsyslog.d$ echo $?
>> 134
>>
>>
>> Even when running rsyslog in debugging/interactive mode, rsyslog -dn seems
>> to have issue
>>
>> Next token is token ')' ()
>> Shifting token ')' ()
>> Entering state 140
>> Reducing stack by rule 67 (line 225):
>> $1 = token FUNC ()
>> $2 = token '(' ()
>> $3 = nterm fparams ()
>> $4 = token ')' ()
>> 7801.689854056:main thread : Called LogMsg, msg: error during
>> parsing file /etc/rsyslog.d/40-dyn_stats.conf, on or before line 148:
>> exec_template(): template 'relay.internal.metric' could not be found
>
> Is anywhere in your system the template "relay.internal.metric" defined?
> Maybe this gh issue helps for further debugging.
>
> https://github.com/rsyslog/rsyslog/issues/1434
>
>> rsyslogd: malloc.c:2406: sysmalloc: Assertion `(old_top == initial_top
>> (av) && old_size == 0) || ((unsigned long) (old_size) >= MINSIZE &&
>> prev_inuse (old_top) && ((unsigned long) old_end & (pagesize - 1)) ==
>> 0)' failed.
>> Aborted
>>
>>
>> How come it's working in background mode and not working in interactive or
>> other modes?
>> (Rsyslog version - 8.27.0, debian 9 stretch)
>
> Why not using a more recent version as this version is from 2017?
>
> https://www.rsyslog.com/downloads/download-other/
> 8.27.0 2017-05-16
>
> https://www.rsyslog.com/news-releases/
>
> Regards
> Alex
> _______________________________________________
> rsyslog mailing list
> https://lists.adiscon.net/mailman/listinfo/rsyslog
> http://www.rsyslog.com/professional-services/
> What's up with rsyslog? Follow https://twitter.com/rgerhards
> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
> sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T
> LIKE THAT.
>
_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.

Re: Rsyslog TLS Integration Issues [ In reply to ]

rsyslog at lists

Jul 29, 2022, 12:25 PM

Post #4 of 4 (369 views)

Permalink

First of all, apologies for the misinformation presented in the post. Upon
further investigation, I realized that rsyslog isn't working fine when
rsyslogd -N 2 is throwing an error. So both are giving consistent
experience of not working

Coming back to the solution - upgraded libgnutls30 present in debian 9
version and its working fine.

On Mon, Jul 25, 2022 at 7:58 PM David Lang via rsyslog <
rsyslog@lists.adiscon.com> wrote:

> there have been a lot of TLS fixes int he last year, anything prior to
> about
> april 2022 has known bugs.
>
> David Lang
> On Mon, 25 Jul 2022, Alex via rsyslog wrote:
>
> > Date: Mon, 25 Jul 2022 13:56:02 +0200
> > From: Alex via rsyslog <rsyslog@lists.adiscon.com>
> > To: rsyslog-users <rsyslog@lists.adiscon.com>
> > Cc: Alex <al-rsyslog@none.at>
> > Subject: Re: [rsyslog] Rsyslog TLS Integration Issues
> >
> > Hi.
> >
> > On 25.07.22 10:34, rajeshksv via rsyslog wrote:
> >> Hi,
> >>
> >> We have built rsyslog with TLS support (--enable-gnutls) and its working
> >> fine (able to send traffic via TLS channel) as a daemon.
> >>
> >> However, when we do rsyslog -N 2, it throws an error
> >>
> >> rsyslogd: malloc.c:2406: sysmalloc: Assertion `(old_top == initial_top
> >> (av) && old_size == 0) || ((unsigned long) (old_size) >= MINSIZE &&
> >> prev_inuse (old_top) && ((unsigned long) old_end & (pagesize - 1)) ==
> >> 0)' failed.
> >> Aborted
> >>
> >>
> >> rajesh.kaki@test-ip:/etc/rsyslog.d$ echo $?
> >> 134
> >>
> >>
> >> Even when running rsyslog in debugging/interactive mode, rsyslog -dn
> seems
> >> to have issue
> >>
> >> Next token is token ')' ()
> >> Shifting token ')' ()
> >> Entering state 140
> >> Reducing stack by rule 67 (line 225):
> >> $1 = token FUNC ()
> >> $2 = token '(' ()
> >> $3 = nterm fparams ()
> >> $4 = token ')' ()
> >> 7801.689854056:main thread : Called LogMsg, msg: error during
> >> parsing file /etc/rsyslog.d/40-dyn_stats.conf, on or before line 148:
> >> exec_template(): template 'relay.internal.metric' could not be found
> >
> > Is anywhere in your system the template "relay.internal.metric" defined?
> > Maybe this gh issue helps for further debugging.
> >
> > https://github.com/rsyslog/rsyslog/issues/1434
> >
> >> rsyslogd: malloc.c:2406: sysmalloc: Assertion `(old_top == initial_top
> >> (av) && old_size == 0) || ((unsigned long) (old_size) >= MINSIZE &&
> >> prev_inuse (old_top) && ((unsigned long) old_end & (pagesize - 1)) ==
> >> 0)' failed.
> >> Aborted
> >>
> >>
> >> How come it's working in background mode and not working in interactive
> or
> >> other modes?
> >> (Rsyslog version - 8.27.0, debian 9 stretch)
> >
> > Why not using a more recent version as this version is from 2017?
> >
> > https://www.rsyslog.com/downloads/download-other/
> > 8.27.0 2017-05-16
> >
> > https://www.rsyslog.com/news-releases/
> >
> > Regards
> > Alex
> > _______________________________________________
> > rsyslog mailing list
> > https://lists.adiscon.net/mailman/listinfo/rsyslog
> > http://www.rsyslog.com/professional-services/
> > What's up with rsyslog? Follow https://twitter.com/rgerhards
> > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
> of
> > sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
> DON'T
> > LIKE THAT.
> >
> _______________________________________________
> rsyslog mailing list
> https://lists.adiscon.net/mailman/listinfo/rsyslog
> http://www.rsyslog.com/professional-services/
> What's up with rsyslog? Follow https://twitter.com/rgerhards
> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
> DON'T LIKE THAT.
>

--
Regards,
Rajesh KSV
_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.