>> Each must be in the proper direction >> (i.e. the client must be the Director for the first stunnel, the SD >> must be the server for the second stunnel). > Yes. Here are the lines from my rc.local that start the tunnels: > # added by JDG on 2005/04/08 to encrypt connections TO the bacula > # storage daemon > /usr/sbin/stunnel -D 6 -S 0 -d 29103 -r localhost:9103 -p > /usr/share/ssl/certs/host.key.pem That's not the proper way to run it on FD machine. Use stunnel -c -d localhost:29103 -r SDmachine:9202 -p .....
The communication takes the following path: 1.) director (client) to FD (server) 2.) FD (client) to SD (server) According to your comment: "added by JDG on 2005/04/08 to encrypt connections TO the bacula storage daemon"; you missed the -c. bye, Ago ------------------------------------------------------- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://ads.osdn.com/?ad_ide95&alloc_id396&op=click _______________________________________________ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
