# tls.authmode

Sets the DTLS peer authentication method used by the action.

This parameter applies to omdtls: Output Module for DTLS Protocol over UDP.

Name:

  tls.authmode

Scope:

  input

Type:

  string

Default:

  input=none

Required?:

  no

Introduced:

  v8.2402.0

## Description

Sets the mode of authentication to be used.

Supported values are `fingerprint`, `name`, or `certvalid`.

- `fingerprint`: Authentication based on certificate fingerprint.

- `name`: Authentication based on the `subjectAltName` and, as a fallback, the subject common name.

- `certvalid`: Requires a valid certificate for authentication.

If this parameter is not set, or if an unsupported value is provided, the action falls back to anonymous authentication (no client certificate required).

## Input usage

    action(type="omdtls" target="192.0.2.1" port="4433" tls.authMode="certvalid")

## See also

See also omdtls: Output Module for DTLS Protocol over UDP.

Support: rsyslog Assistant | GitHub Discussions | GitHub Issues: rsyslog source project

Contributing: Source & docs: rsyslog source project

© 2008–2025 Rainer Gerhards and others. Licensed under the Apache License 2.0.