Return
-
Title
Getting Syslog-ng Store Box's CA certificate for TLS setup on client, Error: 'tlsv1 alert unknown ca' -
Description
This knowledge article describes how to get Syslog-ng Store Box (SSB)'s CA certificate, that makes clients able to send TLS encrypted logs to SSB.
-
Cause
The client cannot send TLS encrypted logs to SSB.
tls_error='SSL routines:ssl3_read_bytes:tlsv1 alert unknown ca'
-
Resolution
- Navigate to menu Basic Settings | Management | SSL certificate
- Click on the subject of 'CA X.509 certificate' and download in PEM format
- Install the certificate on the client.
For TLS configuration instructions see the administration guide or the attachments of the KB263658.