sysklogd icon indicating copy to clipboard operation
sysklogd copied to clipboard

Published 20 hours ago • verified publisher icon troglobit

Add support for RFC5848, signed syslog messages

Open troglobit opened this issue 5 years ago • 2 comments

NetBSD syslogd has support for signed syslog messages according to https://tools.ietf.org/html/rfc5848, this would be highly desirable for easily securing syslog without having the full blown TLS support.

troglobit avatar May 12 '20 06:05 troglobit

The description sounds a lot like DNS Crypt or DNS Over TLS. What cryptography library were you thinking of using?

ghost avatar Feb 17 '22 00:02 ghost

The idea is still to track the upstream NetBSD and FreeBSD syslogd implementations. I have not looked into detail yet what they did, and what dependencies are introduced, but we will not re-implement the wheel.

Here's the NetBSD code, http://cvsweb.netbsd.org/bsdweb.cgi/src/usr.sbin/syslogd/

troglobit avatar Feb 17 '22 16:02 troglobit