Hi everyone, I'm using bacula with encryption with Windows Client version 2.02 and Director/Storage daemons on CentOS 4.4. The client both the PKI Keypair and Master certificate for encryption.
I've been testing out restores with bacula and encryption. I've found some disturbing results. Certain files and directories report decryption errors while others do not. Here are examples of the errors I receive when trying to restore "c:\I386" (a backup of the winXP cd): === + 30-Mar 14:52 staff-vaughn: RestoreFiles.2007-03-30_14.48.49 Fatal error: ../../filed/restore.c:1056 Decryption error for c:\temp/c/I386/ASMS/1/default/ 30-Mar 14:52 staff-vaughn: RestoreFiles.2007-03-30_14.48.49 Error: ../../filed/restore.c:310 Missing cryptographic signature for c:\temp/c/I386/ASMS/1/default/ 30-Mar 14:52 el4_32_build-sd: RestoreFiles.2007-03-30_14.48.49 Fatal error: read.c:139 Error sending to File daemon. ERR=Connection reset by peer 30-Mar 14:52 el4_32_build-sd: RestoreFiles.2007-03-30_14.48.49 Error: bnet.c:439 Write error sending 65536 bytes to client:132.206.43.204:36643: ERR=Connection reset by peer 30-Mar 14:52 staff-vaughn: RestoreFiles.2007-03-30_14.48.49 Error: ../../filed/restore.c:672 Missing cryptographic signature for c:\temp/c/I386/ASMS/1/ 30-Mar 14:52 el4_32_build-dir: RestoreFiles.2007-03-30_14.48.49 Error: Bacula 2.0.3 (06Mar07): 30-Mar-2007 14:52:21 === - I also receive the same errors when trying specifically to restore "c:\I386\ASMS\1\default": === + 30-Mar 15:04 staff-vaughn: RestoreFiles.2007-03-30_15.01.11 Fatal error: ../../filed/restore.c:1056 Decryption error for c:\temp/c/I386/ASMS/1/default/ 30-Mar 15:04 staff-vaughn: RestoreFiles.2007-03-30_15.01.11 Error: ../../filed/restore.c:310 Missing cryptographic signature for c:\temp/c/I386/ASMS/1/default/ 30-Mar 15:04 staff-vaughn: RestoreFiles.2007-03-30_15.01.11 Error: ../../filed/restore.c:672 Missing cryptographic signature for c:\temp/c/I386/ASMS/1/ 30-Mar 15:04 el4_32_build-sd: RestoreFiles.2007-03-30_15.01.11 Fatal error: read.c:124 Error sending to File daemon. ERR=Connection reset by peer 30-Mar 15:04 el4_32_build-sd: RestoreFiles.2007-03-30_15.01.11 Error: bnet.c:406 Write error sending len to client:132.206.43.204:36643: ERR=Connection reset by peer === - Yet I am able to restore a single file "c:\pagefile.sys" from the same system without any problems. I am using both a PKI Keypair and a master cert to do the encryption and just the PKI Keypair to do the decryption. Thank you very much for your help with this, Michael ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys-and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV _______________________________________________ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
