On Fri, 11 Aug 2006, Landon Fuller might have said: > This functionality is available in the 1.39 betas; I have some > documentation on my web site: > http://landonf.bikemonkey.org/code/bacula/ > Configuring_Bacula_Encryption.20060305184424.26351.sandbox.html > > The encryption is implemented in Bacula, using OpenSSL. Instead of > simple symmetric encryption, asymmetric encryption is used to encrypt > the session keys. This allows you to maintain a master keypair for > said user's encrypted data, and retain the ability to restore their > data should their encryption keypair be lost. > > There is still one major gotcha, namely, it's possible for the > director to restore new keys or a bacula configuration file to the > client, and thus force later backups to be made with a compromised > key and/or with no encryption at all. There has been some discussion > on the list regarding solutions to this problem, including limiting > where the director can send a restoration job on the file daemon.
Wonderful. Any estimate on the release of 1.39? Mike ------------------------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 _______________________________________________ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
