From 5fccf771f37973a2cea543fbdf1ed94ed9706faf Mon Sep 17 00:00:00 2001 From: Michael Biebl Date: Tue, 11 Mar 2014 19:04:23 +0100 Subject: Imported Upstream version 7.4.8 --- doc/tls_cert_summary.html | 66 ----------------------------------------------- 1 file changed, 66 deletions(-) delete mode 100644 doc/tls_cert_summary.html (limited to 'doc/tls_cert_summary.html') diff --git a/doc/tls_cert_summary.html b/doc/tls_cert_summary.html deleted file mode 100644 index 8e003bc..0000000 --- a/doc/tls_cert_summary.html +++ /dev/null @@ -1,66 +0,0 @@ - -TLS-protected syslog: Summary - - - -

Encrypting Syslog Traffic with TLS (SSL)

Written by Rainer -Gerhards (2008-07-03)

- -

Summary

If you followed the steps outlined in this documentation set, you now have - - - - -a reasonable (for most needs) secure setup for the following environment: -

You have learned about the security decisions involved and which we -made in this example. Be once again reminded that you must make sure yourself -that whatever you do matches your security needs! There is no guarantee that -what we generally find useful actually is. It may even be totally unsuitable for -your environment. -

In the example, we created a rsyslog certificate authority (CA). Guard the CA's -files. You need them whenever you need to create a new machine certificate. We also saw how -to generate the machine certificates themselfs and distribute them to the individual -machines. Also, you have found some configuration samples for a sever, a client and -a syslog relay. Hopefully, this will enable you to set up a similar system in many -environments. -

Please be warned that you defined some expiration dates for the certificates. -After they are reached, the certificates are no longer valid and rsyslog will NOT -accept them. At that point, syslog messages will no longer be transmitted (and rsyslogd -will heavily begin to complain). So it is a good idea to make sure that you renew the -certificates before they expire. Recording a reminder somewhere is probably a good -idea. -

If you have any more questions, please visit the rsyslog forum and simply ask ;) -

Copyright

Permission is granted to copy, distribute and/or modify this -document under the terms of the GNU Free Documentation License, Version -1.2 or any later version published by the Free Software Foundation; -with no Invariant Sections, no Front-Cover Texts, and no Back-Cover -Texts. A copy of the license can be viewed at -http://www.gnu.org/copyleft/fdl.html.

- -- cgit v1.2.3