feat: S3.7 walking skeleton — SolidSyslogTlsStream (OpenSSL) + TLS BDD

.devcontainer/docker-compose.yml

@@ -23,11 +23,13 @@ services:
     image: balabit/syslog-ng:latest
     volumes:
       - ../Bdd/syslog-ng/syslog-ng.conf:/etc/syslog-ng/syslog-ng.conf
+      - ../Bdd/syslog-ng/tls:/etc/syslog-ng/tls:ro
       - ../Bdd/output:/var/log/syslog-ng
       - syslog-ng-ctl:/var/lib/syslog-ng
     ports:
       - "5514:5514/udp"
       - "5514:5514/tcp"
+      - "6514:6514/tcp"
     working_dir: /workspaces/SolidSyslog
     entrypoint: ["bash", "-c"]
     command:

Bdd/features/environment.py

@@ -14,6 +14,7 @@
 STORE_PATH_PREFIX = "/tmp/STORE"
 RECEIVED_UDP_LOG = "Bdd/output/received_udp.log"
 RECEIVED_TCP_LOG = "Bdd/output/received_tcp.log"
+RECEIVED_TLS_LOG = "Bdd/output/received_tls.log"
 
 
 def wait_for_tcp_port_open(host="syslog-ng", port=5514, timeout=5):

Bdd/features/steps/syslog_steps.py

@@ -12,6 +12,7 @@
 from behave import given, when, then
 from environment import (
     RECEIVED_TCP_LOG,
+    RECEIVED_TLS_LOG,
     RECEIVED_UDP_LOG,
     STORE_FILE_PATH,
     STORE_PATH_PREFIX,
@@ -20,6 +21,7 @@
 PER_TRANSPORT_LOG = {
     "udp": RECEIVED_UDP_LOG,
     "tcp": RECEIVED_TCP_LOG,
+    "tls": RECEIVED_TLS_LOG,
 }
 
 # POSIX-only paths used by the @buffered/threaded scenarios. The cross-platform

Bdd/features/tls_transport.feature

@@ -0,0 +1,10 @@
+@tls @buffered
+Feature: TLS message delivery
+  The threaded example sends messages via TLS transport (RFC 5425) —
+  RFC 6587 octet-counting framing over TLS — to syslog-ng.
+
+  Scenario: Message delivered over TLS
+    Given syslog-ng is running
+    When the threaded example sends a syslog message with transport tls
+    Then syslog-ng receives 1 message over tls
+    And syslog-ng receives a message with priority "134"

Bdd/syslog-ng/syslog-ng-full.conf

@@ -16,6 +16,20 @@ source s_tcp {
     );
 };
 
+source s_tls {
+    syslog(
+        transport("tls")
+        port(6514)
+        keep-hostname(yes)
+        tls(
+            key-file("/etc/syslog-ng/tls/server.key")
+            cert-file("/etc/syslog-ng/tls/server.pem")
+            ca-file("/etc/syslog-ng/tls/ca.pem")
+            peer-verify(optional-untrusted)
+        )
+    );
+};
+
 destination d_file {
     file(
         "/var/log/syslog-ng/received.log"
@@ -46,9 +60,20 @@ destination d_file_tcp {
     );
 };
 
+destination d_file_tls {
+    file(
+        "/var/log/syslog-ng/received_tls.log"
+        template("PRIORITY=${PRI} TIMESTAMP=${ISODATE} HOSTNAME=${HOST} APP_NAME=${PROGRAM} PROCID=${PID} MSGID=${MSGID} STRUCTURED_DATA=${SDATA} MSG=${MSG}\n")
+        flush_lines(1)
+        create-dirs(yes)
+        perm(0644)
+    );
+};
+
 log {
     source(s_udp);
     source(s_tcp);
+    source(s_tls);
     destination(d_file);
 };
 
@@ -61,3 +86,8 @@ log {
     source(s_tcp);
     destination(d_file_tcp);
 };
+
+log {
+    source(s_tls);
+    destination(d_file_tls);
+};

Bdd/syslog-ng/syslog-ng.conf

@@ -16,6 +16,20 @@ source s_tcp {
     );
 };
 
+source s_tls {
+    syslog(
+        transport("tls")
+        port(6514)
+        keep-hostname(yes)
+        tls(
+            key-file("/etc/syslog-ng/tls/server.key")
+            cert-file("/etc/syslog-ng/tls/server.pem")
+            ca-file("/etc/syslog-ng/tls/ca.pem")
+            peer-verify(optional-untrusted)
+        )
+    );
+};
+
 destination d_file {
     file(
         "/var/log/syslog-ng/received.log"
@@ -46,9 +60,20 @@ destination d_file_tcp {
     );
 };
 
+destination d_file_tls {
+    file(
+        "/var/log/syslog-ng/received_tls.log"
+        template("PRIORITY=${PRI} TIMESTAMP=${ISODATE} HOSTNAME=${HOST} APP_NAME=${PROGRAM} PROCID=${PID} MSGID=${MSGID} STRUCTURED_DATA=${SDATA} MSG=${MSG}\n")
+        flush_lines(1)
+        create-dirs(yes)
+        perm(0644)
+    );
+};
+
 log {
     source(s_udp);
     source(s_tcp);
+    source(s_tls);
     destination(d_file);
 };
 
@@ -61,3 +86,8 @@ log {
     source(s_tcp);
     destination(d_file_tcp);
 };
+
+log {
+    source(s_tls);
+    destination(d_file_tls);
+};

Bdd/syslog-ng/tls/README.md

@@ -0,0 +1,21 @@
+# BDD TLS test material
+
+**TEST ONLY.** These keys and certificates exist solely to drive the BDD TLS
+scenarios (`Bdd/features/tls_transport.feature` et al.) against syslog-ng
+running in a BDD compose container. They must never be used for any purpose
+that touches real data.
+
+| File | Role |
+|---|---|
+| `ca.key` | Test CA private key. Signs the server cert. |
+| `ca.pem` | Test CA certificate. Bundled into the example binary via `--tls-ca`. |
+| `server.key` | syslog-ng server private key. |
+| `server.pem` | syslog-ng server certificate, signed by the test CA. SANs: `syslog-ng`, `localhost`, `127.0.0.1`. |
+
+Validity is 10 years from generation, so these effectively never expire for
+test purposes.
+
+## Regenerating
+
+Run `./generate.sh` from this directory (or the repo root). Commit the
+regenerated files — the BDD suite pins them.

Bdd/syslog-ng/tls/ca.key

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

Bdd/syslog-ng/tls/ca.pem

@@ -0,0 +1,19 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

Bdd/syslog-ng/tls/generate.sh

@@ -0,0 +1,42 @@
+#!/usr/bin/env bash
+#
+# Regenerates the test-only self-signed CA + syslog-ng server cert used by the
+# TLS BDD scenarios. Keys in this directory are FOR TESTING ONLY — never use
+# them for anything that touches real data.
+#
+# Run from the repo root:   ./Bdd/syslog-ng/tls/generate.sh
+# Or from this directory:   ./generate.sh
+#
+# Validity is 10 years so the certs effectively never expire for test purposes.
+# If you regenerate, commit the changes — the BDD suite pins these files.
+
+set -euo pipefail
+
+cd "$(dirname "$0")"
+
+DAYS=3650
+SUBJECT_CA="/CN=SolidSyslog BDD Test CA"
+SUBJECT_SRV="/CN=syslog-ng"
+SAN="subjectAltName = DNS:syslog-ng, DNS:localhost, IP:127.0.0.1"
+
+# 1. CA key + self-signed CA cert
+openssl genrsa -out ca.key 2048
+openssl req -x509 -new -nodes -key ca.key -sha256 -days "$DAYS" \
+    -subj "$SUBJECT_CA" -out ca.pem
+
+# 2. Server key + CSR
+openssl genrsa -out server.key 2048
+openssl req -new -key server.key -subj "$SUBJECT_SRV" -out server.csr
+
+# 3. Sign server cert with the CA, carrying the SAN
+openssl x509 -req -in server.csr -CA ca.pem -CAkey ca.key -CAcreateserial \
+    -out server.pem -days "$DAYS" -sha256 \
+    -extfile <(printf "%s\n" "$SAN")
+
+# Remove the CSR and CA serial — only the keys + certs need to be committed
+rm -f server.csr ca.srl
+
+chmod 0644 ca.pem server.pem
+chmod 0600 ca.key server.key
+
+echo "Regenerated test certs in $(pwd)"

Bdd/syslog-ng/tls/server.key

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

Bdd/syslog-ng/tls/server.pem

@@ -0,0 +1,18 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

CMakeLists.txt

@@ -82,12 +82,26 @@ if(HAVE_STDATOMIC_H OR HAVE_WINDOWS_INTERLOCKED)
     set(HAVE_ATOMIC_COUNTER TRUE)
 endif()
 
+# OpenSSL-based TLS is an optional platform feature. Default ON when OpenSSL is
+# discoverable so CI and most workstations get TLS automatically; pass
+# -DSOLIDSYSLOG_OPENSSL=OFF to build a UDP/TCP-only library on systems without
+# OpenSSL.
+find_package(OpenSSL QUIET)
+option(SOLIDSYSLOG_OPENSSL "Include OpenSSL-based TLS support" ${OpenSSL_FOUND})
+if(SOLIDSYSLOG_OPENSSL AND NOT OpenSSL_FOUND)
+    message(FATAL_ERROR "SOLIDSYSLOG_OPENSSL=ON but OpenSSL was not found; install OpenSSL or pass -DSOLIDSYSLOG_OPENSSL=OFF")
+endif()
+
 add_subdirectory(Source)
 
 if(SOLIDSYSLOG_POSIX)
     add_subdirectory(Platform/Posix)
 endif()
 
+if(SOLIDSYSLOG_OPENSSL)
+    add_subdirectory(Platform/OpenSsl)
+endif()
+
 if(HAVE_WINDOWS_INTERLOCKED OR HAVE_WINDOWS_PLATFORM OR SOLIDSYSLOG_WINSOCK)
     add_subdirectory(Platform/Windows)
 endif()

Example/CMakeLists.txt

@@ -9,6 +9,10 @@ if(SOLIDSYSLOG_POSIX)
         Common/ExampleSwitchConfig.c
     )
 
+    if(SOLIDSYSLOG_OPENSSL)
+        list(APPEND COMMON_SOURCES Common/ExampleTlsConfig.c)
+    endif()
+
     # Single-task example: NullBuffer, direct send, bare-metal model
     add_executable(SolidSyslogExample SingleTask/main.c SingleTask/SolidSyslogExample.c ${COMMON_SOURCES})
     target_link_libraries(SolidSyslogExample PRIVATE ${PROJECT_NAME})
@@ -17,12 +21,17 @@ if(SOLIDSYSLOG_POSIX)
         ${CMAKE_CURRENT_SOURCE_DIR}/Common
     )
 
-    # Threaded example: PosixMessageQueueBuffer, two pthreads (requires POSIX threads and mqueue)
+    # Threaded example: PosixMessageQueueBuffer, two pthreads (requires POSIX threads and mqueue).
+    # TLS transport (optional via SOLIDSYSLOG_OPENSSL) adds OpenSSL linkage.
     add_executable(SolidSyslogThreadedExample Threaded/main.c ${COMMON_SOURCES})
     target_link_libraries(SolidSyslogThreadedExample PRIVATE ${PROJECT_NAME} Threads::Threads)
     target_include_directories(SolidSyslogThreadedExample PRIVATE
         ${CMAKE_CURRENT_SOURCE_DIR}/Common
     )
+    if(SOLIDSYSLOG_OPENSSL)
+        target_link_libraries(SolidSyslogThreadedExample PRIVATE OpenSSL::SSL OpenSSL::Crypto)
+        target_compile_definitions(SolidSyslogThreadedExample PRIVATE SOLIDSYSLOG_HAVE_OPENSSL=1)
+    endif()
 elseif(SOLIDSYSLOG_WINSOCK AND HAVE_WINDOWS_PLATFORM)
     # Windows example: NullBuffer + Winsock UDP + Windows clock/hostname/process-id.
     # Output binary is named SolidSyslogExample.exe so BDD scenarios remain platform-agnostic.

Example/Common/ExampleCommandLine.c

@@ -81,7 +81,7 @@ int ExampleCommandLine_Parse(int argc, char* argv[], struct ExampleOptions* opti
                 options->msg = optarg;
                 break;
             case 't':
-                if ((strcmp(optarg, "udp") != 0) && (strcmp(optarg, "tcp") != 0))
+                if ((strcmp(optarg, "udp") != 0) && (strcmp(optarg, "tcp") != 0) && (strcmp(optarg, "tls") != 0))
                 {
                     return 1;
                 }

Example/Common/ExampleSwitchConfig.c

@@ -14,6 +14,10 @@ void ExampleSwitchConfig_SetByName(const char* name)
     {
         selectedIndex = EXAMPLE_SWITCH_TCP;
     }
+    else if (strcmp(name, "tls") == 0)
+    {
+        selectedIndex = EXAMPLE_SWITCH_TLS;
+    }
 }
 
 uint8_t ExampleSwitchConfig_Selector(void)

Example/Common/ExampleSwitchConfig.h

@@ -11,6 +11,7 @@ EXTERN_C_BEGIN
     {
         EXAMPLE_SWITCH_UDP,
         EXAMPLE_SWITCH_TCP,
+        EXAMPLE_SWITCH_TLS,
         EXAMPLE_SWITCH_COUNT,
     };