Todd C. Miller
0f6d581abd
If pid_file is set to an empty value, disable the use of a pid file.
2020-11-24 09:43:00 -07:00
Todd C. Miller
d0042eda9e
Don't overwrite sudo_logsrvd.pid if it is a symbolic link.
2020-11-24 09:00:25 -07:00
Todd C. Miller
fc79cbc317
Only enable TLS listener by default if we have a cert for it.
...
We want the log server to work with the default configuration. If
the default certificate path exists, it will be used with the default
listener. If the user explicitly enabled a TLS listener we always
attempt to use it. If TLS was specified but no cert file was set,
the default location will be used (and an error will occur if the
cert cannot be loaded).
2020-05-08 16:07:55 -06:00
Todd C. Miller
e5f8214c0a
Remove the tls parameter from the ServerHello message.
...
The TLS connection is now initiated before ServerHello is received.
2020-05-05 13:23:26 -06:00
Todd C. Miller
8186b98208
Adapt sudoers iolog client to log server dual port changes.
...
The TLS handshake now occurs before the ServerHello message is read.
This fixes potential man-in-the-middle attacks and works better with
TLS 1.3.
2020-05-05 13:23:26 -06:00
Todd C. Miller
1659d96c55
Use port 30343 for plaintext and port 30344 for TLS.
...
For TLS connections we now do the TLS handshake immediately before
the ServerHello message. This lets the client recieve an alert
from the server is there is a handshake error after the TLS connect
has succeeded. It also means that the contents of the ServerHello
are protected from a man-in-the-middle attack.
2020-05-05 13:23:26 -06:00
Todd C. Miller
42df431ce2
Make the default certificate and key paths match the example file.
2020-05-04 11:33:04 -06:00
Todd C. Miller
f908ddd1bf
Create a pidfile for sudo_logsrvd when not run with the -n flag.
2020-03-29 05:05:08 -06:00
Todd C. Miller
982c003b8d
Add support for JSON structured logging using syslog.
...
Note that depending on the system, the default syslog buffer
may not be large enough to store all the logging data.
2020-02-17 16:25:18 -07:00
Todd C. Miller
5781a6a4cf
Add support for JSON logging in sudo_logsrvd.
2020-02-17 16:10:56 -07:00
Todd C. Miller
cec6b1708a
Regenerate .man.in files from .mdoc.in
2020-02-02 16:13:05 -07:00
Todd C. Miller
f4716a75e4
Document new tls_verify setting.
2020-01-23 11:42:08 -07:00
Todd C. Miller
07a2965bab
Document TCP keepalive options in the manual pages.
2020-01-22 11:07:01 -07:00
Todd C. Miller
b31b830518
Document the process of creating self-signed certificates for sudo_logsrvd.
...
Based on a document from Laszlo Orban.
2019-11-19 14:29:40 -07:00
Todd C. Miller
4bb2b2f605
regen
2019-11-16 19:14:40 -07:00
Todd C. Miller
1df3230c2a
Document the sudo log server protocol
2019-10-24 20:04:33 -06:00
Todd C. Miller
b57054785f
Add manual pages for logsrvd and sendlog.
2019-10-24 20:04:32 -06:00
