From 68a05ef8d56f443ea861f6c96eea983029e93c1f Mon Sep 17 00:00:00 2001 From: dplore Date: Tue, 20 Aug 2024 12:46:30 -0700 Subject: [PATCH 1/2] add syslog tls --- .../system/openconfig-system-logging.yang | 24 ++++++++++++++++++- 1 file changed, 23 insertions(+), 1 deletion(-) diff --git a/release/models/system/openconfig-system-logging.yang b/release/models/system/openconfig-system-logging.yang index f845547cb..4eac8908b 100644 --- a/release/models/system/openconfig-system-logging.yang +++ b/release/models/system/openconfig-system-logging.yang @@ -23,7 +23,13 @@ module openconfig-system-logging { "This module defines configuration and operational state data for common logging facilities on network systems."; - oc-ext:openconfig-version "0.6.0"; + oc-ext:openconfig-version "0.7.0"; + +revision "2024-08-20" { + description + "Adding tls support for syslog."; + reference "0.7.0"; + } revision "2023-07-20" { description @@ -429,6 +435,22 @@ revision "2023-07-20" { "Sets the destination port number for syslog UDP messages to the server. The default for syslog is 514."; } + + leaf transport-security { + type boolean; + description + "Indicates if syslog transport layer security (TLS) is enabled."; + } + + leaf tls-profile-id { + type string; + description + "The ID of this syslog server's TLS profile. TLS profiles are managed + using the gNSI Certz service or other certificate management service + provided by the system."; + reference + "https://github.com/openconfig/gnsi/tree/main/certz"; + } } grouping logging-remote-state { From f4a4539133697e7fe4b5e608cc9b9a1e61f99e85 Mon Sep 17 00:00:00 2001 From: dplore Date: Thu, 22 Aug 2024 14:58:27 -0700 Subject: [PATCH 2/2] correct server to client --- release/models/system/openconfig-system-logging.yang | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/release/models/system/openconfig-system-logging.yang b/release/models/system/openconfig-system-logging.yang index 4eac8908b..c7eaae8a5 100644 --- a/release/models/system/openconfig-system-logging.yang +++ b/release/models/system/openconfig-system-logging.yang @@ -445,7 +445,7 @@ revision "2023-07-20" { leaf tls-profile-id { type string; description - "The ID of this syslog server's TLS profile. TLS profiles are managed + "The ID of this syslog client's TLS profile. TLS profiles are managed using the gNSI Certz service or other certificate management service provided by the system."; reference