Comment 12 for bug 1417875

Revision history for this message
Wayne Witzel III (wwitzel3) wrote :

After further investigation it looks like my previous statement is incorrect. We call composeTLS during the connect to the remote rsyslog, passing in the ca-cert.pem to generate the client cert for the connection. We do this on the fly.

In replaceRemoteLogger we have a range that loops over all of the StateServerAddresses, it attempts to connect to each state server using this client cert, generated using composeTLS, but each of the state machines have different ca-certs. This is why we see the error repeated for each of the other state machines.