You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@logging.apache.org by "ASF GitHub Bot (JIRA)" <ji...@apache.org> on 2019/05/13 05:27:00 UTC

[jira] [Work logged] (LOG4J2-2532) SyslogAppender with RFC5424 and TLS is prepending messagelength

     [ https://issues.apache.org/jira/browse/LOG4J2-2532?focusedWorklogId=240873&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-240873 ]

ASF GitHub Bot logged work on LOG4J2-2532:
------------------------------------------

                Author: ASF GitHub Bot
            Created on: 13/May/19 05:26
            Start Date: 13/May/19 05:26
    Worklog Time Spent: 10m 
      Work Description: rgoers commented on issue #252: Fixed message length with TLS and Syslog // fixes LOG4J2-2532
URL: https://github.com/apache/logging-log4j2/pull/252#issuecomment-491680441
 
 
   Closing this PR since the TLS support for RFC 5424 Syslog records is covered in https://tools.ietf.org/html/rfc5425 which specifies that the 2 byte length prefix is required.
 
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Issue Time Tracking
-------------------

            Worklog Id:     (was: 240873)
            Time Spent: 40m  (was: 0.5h)
    Remaining Estimate: 20m  (was: 0.5h)

> SyslogAppender with RFC5424 and TLS is prepending messagelength
> ---------------------------------------------------------------
>
>                 Key: LOG4J2-2532
>                 URL: https://issues.apache.org/jira/browse/LOG4J2-2532
>             Project: Log4j 2
>          Issue Type: Bug
>          Components: Core, Layouts
>    Affects Versions: 2.11.1
>         Environment: Linux
>            Reporter: Maximilian
>            Priority: Blocker
>   Original Estimate: 1h
>          Time Spent: 40m
>  Remaining Estimate: 20m
>
> If I want to log via Syslog (RFC5424) the logs seem to have the length of the message in front of the message which results in parser errors at the syslogserver.
> {{config:}}
> {{<?xml version="1.0" encoding="UTF-8"?>}}
> {{ <Configuration status="INFO">}}
> {{ <Appenders>}}
> {{  <Syslog name="local" host="localhost" port="10001" format="RFC5424" newLine="true" id="App" mdcId="9999">}}
> {{   <SSL>}}
> {{    <TrustStore location="trust.jks" password="testtest" />}}
> {{   </SSL>}}
> {{  </Syslog>}}
> {{ </Appenders>}}
> {{ <Loggers>}}
> {{  <Root level="debug">}}
> {{   <AppenderRef ref="local"/>}}
> {{  </Root>}}
> {{ </Loggers>}}
> {{ </Configuration> }}
> {{Result (with openssl s_server -key private.pem -cert public.pem -accept 10001):}}
> {{67 <134>1 2019-01-14T13:26:14.947+01:00 apu localhorst 12866 - - Test}}
> Expected result:
> {{<134>1 2019-01-14T13:26:14.947+01:00 apu localhorst 12866 - - Test}}



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)