Re: syslog over TLS

2015-02-03 Thread Ted Unangst
sven falempin wrote: > > Dear Tech@openbsd.org in the future, it's not really necessary to quote the entire diff. > > > Most of TLS client got a few parameters like : > > CRL,CA,and Client Certificat > > Just look at < Document how to send syslog messages over TCP or TLS. > > (because this T

Re: syslog over TLS

2015-02-03 Thread sven falempin
On Fri, Jan 16, 2015 at 12:54 PM, Reyk Floeter wrote: > On Fri, Jan 16, 2015 at 12:56:45PM +0100, Alexander Bluhm wrote: >> On Fri, Jan 16, 2015 at 01:46:09AM +0100, Alexander Bluhm wrote: >> > This diff enables sending syslog messages over TLS. >> >> Updated diff after sys/param.h commit. Only s

Re: syslog over TLS

2015-01-16 Thread Reyk Floeter
On Fri, Jan 16, 2015 at 12:56:45PM +0100, Alexander Bluhm wrote: > On Fri, Jan 16, 2015 at 01:46:09AM +0100, Alexander Bluhm wrote: > > This diff enables sending syslog messages over TLS. > > Updated diff after sys/param.h commit. Only some context changed. > > bluhm > Despite my scepticism ab

Re: syslog over TLS

2015-01-16 Thread Theo de Raadt
> I just don't think that adding a specific dependency for > libtls/libssl/libcrypto to libevent is the right direction. Let's not get hung up on how this code will fit into the libtls picture yet. It is very valuable that Alexander can get it the async tls case perfected for the syslogd case, th

Re: syslog over TLS

2015-01-16 Thread Alexander Bluhm
On Fri, Jan 16, 2015 at 01:46:09AM +0100, Alexander Bluhm wrote: > This diff enables sending syslog messages over TLS. Updated diff after sys/param.h commit. Only some context changed. bluhm Index: usr.sbin/syslogd/Makefile === RCS

Re: syslog over TLS

2015-01-16 Thread Alexander Bluhm
On Fri, Jan 16, 2015 at 06:17:01PM +0800, Dongsheng Song wrote: > On Fri, Jan 16, 2015 at 8:46 AM, Alexander Bluhm > wrote: > > > > - Wrong format. The TLS RFC requires length-message encoding, I > > use message-newline inherited from TCP. > > Transmission of Syslog Messages over TCP (RFC 6587

Re: syslog over TLS

2015-01-16 Thread Dongsheng Song
On Fri, Jan 16, 2015 at 8:46 AM, Alexander Bluhm wrote: > > - Wrong format. The TLS RFC requires length-message encoding, I > use message-newline inherited from TCP. Transmission of Syslog Messages over TCP (RFC 6587) prefer use 'octet-counting', not 'non-transparent-framing method'. http://t

Re: syslog over TLS

2015-01-16 Thread Reyk Floeter
On Fri, Jan 16, 2015 at 09:11:47AM +, Nicholas Marriott wrote: > Hi > > WRT libevent - we have already added some ASR functions to libevent for > smtpd, I'd say libevent 1.4 is pretty much closed for new development > upstream - there won't be much to sync - and we have a port of 2.x for > por

Re: syslog over TLS

2015-01-16 Thread Nicholas Marriott
Hi WRT libevent - we have already added some ASR functions to libevent for smtpd, I'd say libevent 1.4 is pretty much closed for new development upstream - there won't be much to sync - and we have a port of 2.x for ports to use. So I don't think there are strong reasons not to change our libevent

Re: syslog over TLS

2015-01-16 Thread Reyk Floeter
On Fri, Jan 16, 2015 at 01:46:09AM +0100, Alexander Bluhm wrote: > Hi, > > This diff enables sending syslog messages over TLS. > > To implement the buffer layer, I have copied evbuffer.c from libevent > and changed TCP to TLS where necessary. This way I made a buffertls > wrapper around bufferev

Re: syslog over TLS

2015-01-15 Thread Ted Unangst
On Fri, Jan 16, 2015 at 01:46, Alexander Bluhm wrote: > Hi, > > This diff enables sending syslog messages over TLS. > > To implement the buffer layer, I have copied evbuffer.c from libevent > and changed TCP to TLS where necessary. This way I made a buffertls > wrapper around bufferevent. This

syslog over TLS

2015-01-15 Thread Alexander Bluhm
Hi, This diff enables sending syslog messages over TLS. To implement the buffer layer, I have copied evbuffer.c from libevent and changed TCP to TLS where necessary. This way I made a buffertls wrapper around bufferevent. This might be integrated into libevent later. It still has some limitati