[Bug 869881] Re: rsyslogd fails to load lmnsd_gtls.so

[schmooster]

http://kb.monitorware.com/problems-loading-tls-plugin-t10921.html
suggests that  "could not load module
'/usr/local/lib/rsyslog/lmnsd_gtls.so', rsyslog error -2078" actually
means "I can't read your ca.pem file...[snipped]"


So, in my case, ` sudo  /usr/sbin/rsyslogd -c5  -dn ` contained the following output:
5848.863681948:7f061271d700: GTLS CA file: '/var/lib/orchestra/ssl-cert-orchestra-ca.pem'
5848.863722114:7f0614795740: 	Exec only when previous is suspended: 0
5848.864106720:7f061271d700: unexpected GnuTLS error -64 in nsd_gtls.c:583: Error while reading file.
5848.864137883:7f061271d700: Called LogError, msg: could not load module '/usr/lib/rsyslog/lmnsd_gtls.so', rsyslog error -2078

/var/lib/orchestra/ssl-cert-orchestra-ca.pem does not exist for me at
this time.


In the debug log provided by Mark above, I can see the following:
7508.666383742:main queue:Reg/w0: GTLS CA file: '/root/ssl/ca.pem'
7508.666438320:main queue:Reg/w0: unexpected GnuTLS error -64 in nsd_gtls.c:574: Error while reading file.
7508.666458318:main queue:Reg/w0: Called LogError, msg: could not load module '/usr/lib/rsyslog/lmnsd_gtls.so', rsyslog error -2078

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to rsyslog in Ubuntu.
https://bugs.launchpad.net/bugs/869881

Title:
  rsyslogd fails to load lmnsd_gtls.so

Status in “rsyslog” package in Ubuntu:
  Confirmed

Bug description:
  rsyslog fails to load tls functionality.

  Relevant section from rsyslog.conf: 
  (full file is attached, contents of /etc/rsyslog.d is unmodified from package defaults, and running `rsyslogd  -f /etc/rsyslog.conf  -c4 -N1` does not show any configuration errors. The remote logging section is copy-pasted from a working debian 6  box)
  ########################
  #### REMOTE LOGGING ####
  ########################
  # certificate files
  $DefaultNetstreamDriverCAFile /root/ssl/ca.pem
  $DefaultNetstreamDriverCertFile /root/ssl/generic-cert.pem
  $DefaultNetstreamDriverKeyFile /root/ssl/generic-key.pem

  
  # set up the action
  $DefaultNetstreamDriver gtls # use gtls netstream driver
  $ActionSendStreamDriverMode 1 # require TLS for the connection
  $ActionSendStreamDriverAuthMode x509/certvalid

  *.* @@(o)10.181.60.127:10514 # send (all) messages

  
  Error written to syslog: 
  Oct  7 09:59:01 alpha rsyslogd-2068: could not load module '/usr/lib/rsyslog/lmnsd_gtls.so', rsyslog error -2078

  Relevant info from running in debug mode (full debug output is attached): 
  7508.666438320:main queue:Reg/w0: unexpected GnuTLS error -64 in nsd_gtls.c:574: Error while reading file.

  I have also attached strace output from rsyslog.

  ProblemType: Bug
  DistroRelease: Ubuntu 10.04
  Package: rsyslog-gnutls 4.2.0-2ubuntu8.1
  Uname: Linux 2.6.35.4-rscloud x86_64
  Architecture: amd64
  Date: Fri Oct  7 09:38:03 2011
  ProcEnviron: SHELL=/bin/bash
  SourcePackage: rsyslog

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/rsyslog/+bug/869881/+subscriptions