Accept Logs via SSL/TLS
How to configure the rsyslog server to transmit logs via SSL/TLS. The logs that have been transmitted from the client to the rsyslog server will be encrypted over the network to have an extra level of security.
As we need to establish trust between client/server we would need to generate the CA certificates for each of the server/client.
Generate CA certifiates in Rsyslog server
In order to generate a certificate for the service, we will use the certificate center and generates a slef-signed certificate.
On the left menu, go to “Your system” > “Certificate center”
Click on the “Self-signed root certificate” button.
Fill the form to build the certificate and click on Create button
Apply the certificate to the syslog daemon service.
- On the left menu, choose “
Events Center” > “Syslog” - On the main config, turn on the “Enable TCP/IP sockets” and the “Use SSL” check-boxes.
- On the certificate drop-down list, choose the created certificate.
