[Logcheck-commits] martin f. krafft: ignore new message format for lacking subject CN in peer cert.

Martin F. Krafft madduck at alioth.debian.org
Sun Aug 31 19:24:12 UTC 2008


Module: logcheck
Branch: master
Commit: c81353d74d809381890b1850b4a4652444c2f991
URL:    http://git.debian.org/?p=logcheck/logcheck.git;a=commit;h=c81353d74d809381890b1850b4a4652444c2f991

Author: martin f. krafft <madduck at debian.org>
Date:   Fri Jul 18 15:17:30 2008 +0200

ignore new message format for lacking subject CN in peer cert.

---

 debian/changelog                        |    1 +
 rulefiles/linux/ignore.d.server/postfix |    2 +-
 2 files changed, 2 insertions(+), 1 deletions(-)

diff --git a/debian/changelog b/debian/changelog
index 710a9d4..e216e14 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -6,6 +6,7 @@ logcheck (1.2.68) unstable; urgency=low
   * ignore.d.server/postfix:
     - ignore messages about untrusted cert issuers that have any of &(), in
       their name.
+    - ignore new message format for lacking subject CN in peer cert.
 
  -- martin f. krafft <madduck at debian.org>  Thu, 17 Jul 2008 12:17:19 +0200
 
diff --git a/rulefiles/linux/ignore.d.server/postfix b/rulefiles/linux/ignore.d.server/postfix
index fbe4b34..2e2dbc3 100644
--- a/rulefiles/linux/ignore.d.server/postfix
+++ b/rulefiles/linux/ignore.d.server/postfix
@@ -170,7 +170,7 @@
 ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ postfix/local\[[[:digit:]]+\]: warning: maildir access problem for UID/GID=[[:digit:]]+/[[:digit:]]+: create [/.[:alnum:]]+: Permission denied$
 ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ postfix/local\[[[:digit:]]+\]: warning: perhaps you need to create the maildirs in advance$
 ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ postfix/smtpd?\[[[:digit:]]+\]: Peer verification: [[:digit:]]+ dNSNames in certificate found, but no one does match [-_.[:alnum:]]+$
-^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ postfix/smtpd?\[[[:digit:]]+\]: warning: peer certificate has no (subject CN|issuer Organization)$
+^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ postfix/smtpd?\[[[:digit:]]+\]: warning: (tls_text_name: [-._[:alnum:]]+\[[.[:digit:]]+\]: )?peer certificate has no (subject CN|issuer Organization)$
 ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ postfix/smtpd\[[[:digit:]]+\]: warning: SASL authentication failure: .+$
 ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ postfix/smtpd\[[[:digit:]]+\]: warning: [-._[:alnum:]]+\[[.[:digit:]]+\]: SASL (LOGIN|PLAIN|(DIGEST|CRAM)-MD5|APOP) authentication failed(:[ [:alnum:]]*)?$
 ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ postfix/smtpd\[[[:digit:]]+\]: warning: non-SMTP command from [^[:space:]]+\[[[:digit:]a-f.:]{3,39}\]: .+$




More information about the Logcheck-commits mailing list