vyos-1x.git/interface-definitions/system_syslog.xml.in, branch fix/T8955-http-api-verify-tlsVyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git)
https://git.amelek.net/vyos/vyos-1x.git/atom?h=fix%2FT8955-http-api-verify-tls2025-10-31T14:05:09+00:00syslog: T4251: Rename "permitted-peers" to "permitted-peer" and improve TLS checks2025-10-31T14:05:09+00:00Oleksandr Kuchmystyio.kuchmystyi@vyos.io2025-10-31T14:05:09+00:00urn:sha1:6d4c6fb9b5ccd372f16073708b74f885521dbce9
- Renamed `permitted-peers` to `permitted-peer` across templates, schema, and tests.
- Added support for multiple `permitted-peer` entries and trimmed empty values.
- Replaced TLS/UDP warning with ConfigError for strict validation.
- Updated tests to use TCP for TLS and verified new validation logic.
syslog: T4251: Fix TLS enablement logic for syslog2025-10-24T11:48:42+00:00Oleksandr Kuchmystyio.kuchmystyi@vyos.io2025-10-24T11:48:42+00:00urn:sha1:34ce34f1680a5c34a68aa7a9774107e7bb2b7610syslog: T4251: Add TLS support to syslog2025-09-30T14:37:52+00:00Oleksandr Kuchmystyio.kuchmystyi@vyos.io2025-09-17T13:33:39+00:00urn:sha1:68f2cec785b6705c71d17b30114355569c489d66
Add TLS support for remote syslog by extending the CLI and backend to support configuration of CA certificates, client certificates, keys, and authentication modes.
This update integrates with the PKI subsystem for certificate management, ensures proper validation of protocol settings when TLS is enabled, and generates secure rsyslog configuration for forwarding logs over TLS.
syslog: T7270: improve descriptions of format options2025-03-25T09:23:13+00:00Ben Woodsgit@ben.woods.am2025-03-25T09:23:13+00:00urn:sha1:e669a53dadc0f319b2e089337330b59a8cb23457syslog: T6989: add option do disable "MARK"2025-03-04T13:05:36+00:00Christian Breunigchristian@breunig.cc2025-03-04T12:47:30+00:00urn:sha1:cf99d54870da341c1b7b3af58f102e26c16ce379
New CLI command
set system syslog marker disable
syslog: T6989: fix validator range to match completion helper2025-03-04T12:44:27+00:00Christian Breunigchristian@breunig.cc2025-03-04T12:44:27+00:00urn:sha1:3500e743ad608a8aecc1cf9004f1792e4f74729csyslog: T6989: add possibility to define VRF per remote2025-02-04T17:09:39+00:00Christian Breunigchristian@breunig.cc2025-01-18T19:28:16+00:00urn:sha1:5a7a9f3a20e19a52572ce1b9b214528b6ce958ce
Rsyslog supports individual VRFs per omfwd remote entry - so we should support
this, too.
syslog: T6989: rename "global" to "local"2025-02-03T06:16:35+00:00Christian Breunigchristian@breunig.cc2025-01-22T19:52:52+00:00urn:sha1:211bc4a767564d1eb28b431e1529eb719bb721a9
The previously "global" options actually were only relevant for the local
logging to /var/log/messages.
syslog: T6989: move up "global marker" one level in CLI2025-02-03T06:16:07+00:00Christian Breunigchristian@breunig.cc2025-01-15T19:45:42+00:00urn:sha1:b9c43b19acb6f649bb6f64c75ab63df768e360c9syslog: T6989: move up "global preserve-fqdn" one level in CLI2025-02-03T06:16:07+00:00Christian Breunigchristian@breunig.cc2025-01-15T19:38:43+00:00urn:sha1:20ab585a68982c4635c4e5a1ee5bbcc219feaebc
Move "global preserve-fqdn" one CLI level up, as it relates to all logging
targets (console, global and remote).