Re: TLS "trusted-dn" Question

Hi,

Just confirming that this option works fine too. Thx again for pointing this out.

-David

> -----Original Message-----
> From: syslog-ng <[email protected]> On Behalf Of David Hauck
> Sent: Tuesday, April 04, 2023 5:22 PM
> To: László Várady <[email protected]>; Syslog-ng users' and developers' mailing list <syslog-
> [email protected]>
> Subject: Re: [syslog-ng] TLS "trusted-dn" Question
> 
> Hi László,
> 
> Great, thx, I'll give this a try too (so the CA bundle must already exist - no support for using the target
> as defined by ca-dir()?).
> 
> Regards,
> -David
> 
> On Tuesday, April 04, 2023 1:43 PM, László Várady <[email protected]> wrote:
> > Hi,
> >
> >> Not exactly sure how I'd wrap all of key-file(), cert-file(), and
> >> ca-dir() (all certs) values into a single pfx file? Do you happen to
> >> know how this ca be done (with openssl presumably)?
> >>
> >
> > I usually do this with the following openssl command:
> >
> > |openssl pkcs12 -export -inkey my.key -in my.crt -certfile ca.crt -out
> > my.p12|
> >
> > --
> > László Várady||
> _____________________________________________________________________________
> _
> Member info:
> https://usg02.safelinks.protection.office365.us/?url=https%3A%2F%2Flists.balabit.hu%2Fmailman%2F
> listinfo%2Fsyslog-
> ng&data=05%7C01%7Cdavidh%40netacquire.com%7C6491ba377e3e401ef75b08db356bc7ce%7Cec65e
> 18eede24cedbdab49355e3f602d%7C0%7C0%7C638162510235159800%7CUnknown%7CTWFpbGZsb3d8
> eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&s
> data=XwSVBtIvUh7X%2FFQPqqsEBHHtWvE%2ByVyNBL01Ru4m8t4%3D&reserved=0
> Documentation:
> https://usg02.safelinks.protection.office365.us/?url=http%3A%2F%2Fwww.balabit.com%2Fsupport%
> 2Fdocumentation%2F%3Fproduct%3Dsyslog-
> ng&data=05%7C01%7Cdavidh%40netacquire.com%7C6491ba377e3e401ef75b08db356bc7ce%7Cec65e
> 18eede24cedbdab49355e3f602d%7C0%7C0%7C638162510235159800%7CUnknown%7CTWFpbGZsb3d8
> eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&s
> data=Srn8suqa2kdrgDrRx0cYKlDTTF%2F7vq78h7HDh0XRCB0%3D&reserved=0
> FAQ:
> https://usg02.safelinks.protection.office365.us/?url=http%3A%2F%2Fwww.balabit.com%2Fwiki%2Fsy
> slog-ng-
> faq&data=05%7C01%7Cdavidh%40netacquire.com%7C6491ba377e3e401ef75b08db356bc7ce%7Cec65
> e18eede24cedbdab49355e3f602d%7C0%7C0%7C638162510235159800%7CUnknown%7CTWFpbGZsb3
> d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C
> &sdata=rxdJNwD3EbcdEy7e3lqVOh1a0vTpKYFi3%2BdOj%2B2SH1o%3D&reserved=0
> 
> External Email Warning! Use caution before clicking links or opening attachments.
______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq