# StreamDriver.PermitExpiredCerts

Controls how expired certificates are handled in TLS mode.

This parameter applies to imtcp: TCP Syslog Input Module.

Name:

  StreamDriver.PermitExpiredCerts

Scope:

  module, input

Type:

  string (see Rsyslog Parameter String Constants)

Default:

  module=warn, input=module parameter

Required?:

  no

Introduced:

  at least 5.x, possibly earlier

## Description

Controls how expired certificates will be handled when stream driver is in TLS mode. It can have one of the following values:

- on = Expired certificates are allowed

- off = Expired certificates are not allowed (Default, changed from warn to off since Version 8.2012.0)

- warn = Expired certificates are allowed but warning will be logged

The same-named input parameter can override this module setting.

## Module usage

    module(load="imtcp" streamDriver.permitExpiredCerts="off")

## Input usage

    input(type="imtcp" port="514" streamDriver.permitExpiredCerts="off")

## See also

See also imtcp: TCP Syslog Input Module.

Support: rsyslog Assistant | GitHub Discussions | GitHub Issues: rsyslog source project

Contributing: Source & docs: rsyslog source project

© 2008–2025 Rainer Gerhards and others. Licensed under the Apache License 2.0.