# tls.authMode

Defines the mutual authentication method used for DTLS clients. .. summary-end

This parameter applies to imdtls: Input Module for DTLS Protocol over UDP.

Name:

  tls.authMode

Scope:

  input

Type:

  string

Default:

  none

Required?:

  no

Introduced:

  v8.2402.0

## Description

Sets the mode used for mutual authentication.

Supported values are:

- fingerprint: Authentication based on certificate fingerprint.

- name: Authentication based on the `subjectAltName` and, as a fallback, the `subject common name`.

- certvalid: Requires a valid certificate for authentication.

If any other value is provided, or if the parameter is omitted, anonymous authentication (certanon) is used, which does not require a client certificate.

## Input usage

    module(load="imdtls")
    input(type="imdtls" tls.authMode="certvalid")

## See also

See also imdtls: Input Module for DTLS Protocol over UDP.

Support: rsyslog Assistant | GitHub Discussions | GitHub Issues: rsyslog source project

Contributing: Source & docs: rsyslog source project

© 2008–2025 Rainer Gerhards and others. Licensed under the Apache License 2.0.