StreamDriver.PermitExpiredCerts

Controls how expired certificates are handled in TLS mode.

This parameter applies to imtcp: TCP Syslog Input Module.

Name:

StreamDriver.PermitExpiredCerts

Scope:

module, input

Type:

string (see String Constants)

Default:

module=warn, input=module parameter

Required?:

no

Introduced:

at least 5.x, possibly earlier

Description

Controls how expired certificates will be handled when stream driver is in TLS mode. It can have one of the following values:

  • on = Expired certificates are allowed

  • off = Expired certificates are not allowed (Default, changed from warn to off since Version 8.2012.0)

  • warn = Expired certificates are allowed but warning will be logged

The same-named input parameter can override this module setting.

Module usage

module(load="imtcp" streamDriver.permitExpiredCerts="off")

Input usage

input(type="imtcp" port="514" streamDriver.permitExpiredCerts="off")

See also

See also imtcp: TCP Syslog Input Module.

Support: rsyslog Assistant | GitHub Discussions | GitHub Issues: rsyslog source project

Contributing: Source & docs: rsyslog source project

© 2008–2025 Rainer Gerhards and others. Licensed under the Apache License 2.0.