Is it safe to run the non premium version of syslog-ng? (The one that doesnt use ssl)

abefroman · 05-30-2008, 09:12 PM

Quote:

The syslog-ng Premium Edition is the direct descendant of the opensource syslog-ng project that started ten years ago. This branch is developed as a commercial product. The premium edition offers the following benefits:

Secure logging using SSL/TLS
Encrypt sensitive data: Log messages may contain sensitive information that should not be accessed by third parties. Therefore, syslog-ng Premium Edition uses the Transport Layer Security (TLS) protocol to encrypt the communication. TLS also allows the mutual authentication of the host and the server using X.509 certificates.

win32sux · 05-30-2008, 10:18 PM

If your concern is that the data is transmitted in cleartext form, you can easily overcome that by setting up Stunnel. IIRC, newer versions of OpenSSH also make this a lot simpler than it was with previous ones - so that's yet another option.

rgerhards · 06-02-2008, 06:52 AM

If you are interested in the privacy options, you may also want to have a look at rsyslog. Rsyslog in the most recent version also support TLS natively, and supports GSSAPI for quite a while. rsyslog is all-GPL, so it is free to use. You can find a comparison to syslog-ng here:

http://www.rsyslog.com/doc-rsyslog_ng_comparison.html

Rainer
[disclaimer: I am the rsyslog author

]

abefroman · 06-02-2008, 08:34 AM

Quote:

Originally Posted by rgerhards

If you are interested in the privacy options, you may also want to have a look at rsyslog. Rsyslog in the most recent version also support TLS natively, and supports GSSAPI for quite a while. rsyslog is all-GPL, so it is free to use. You can find a comparison to syslog-ng here:

http://www.rsyslog.com/doc-rsyslog_ng_comparison.html

Rainer
[disclaimer: I am the rsyslog author

]

Cool! I'll check that out.

Are you also the phpLogCon author?

unSpawn · 06-04-2008, 03:32 AM

Moved: The posts in this thread about phpLogCon (taxonomy: not related to OP > not Security > compile-time errors > Software) are more suitable as thread in the Software forum and has been moved accordingly to help your thread/question get the exposure it deserves. Please continue that part of the discussion at http://www.linuxquestions.org/questi...error.-646889/.