Hello Florian,
If you installed bacula from source, you can rebuild using --with-openssl
in your configure options. All your configuration files will be kept.
Otherwise, I'm quite sure that the packages are all built with SSL enabled.
In addition, you have some debug messages that will provide you information
about SSL connections between the daemons (I think that running your
bacula-dir with a -d 200 level is sufficient). They are messages with a
"ssl=value", where value will be:
0 = TLS is not being used (is not enabled, could not be established, etc.)
1 = TLS is enabled but not required on the end point
2 = TLS is enabled and required
Error messages will be reported in debug mode if you configure TLS as
enabled/required and the connection cannot be established for some reason.
Best regards,
Ana
On Tue, Mar 8, 2016 at 1:35 PM, Florian Splett <florian.spl...@web.de>
wrote:
> Thank you for your input.
> I am a bit unsure wether or not the TLS options will work, so I might
> prepare a vpn connection instead through which bacula can send the files.
>
> Regards,
>
> Florian S.
>
>
> Am 03.03.2016 um 11:48 schrieb Alex Domoradov:
>
> But at the same time it seems that openssl enabled by default at least if
> the bacula can find headers and libraries
>
> # ./configure --prefix=/opt/bacula-7.4.0 --with-postgresql=/usr/pgsql-9.4/
> --with-mysql --enable-acl --with-tcp-wrappers --with-sqlite3
> ...
>
> Large file support: yes
> Bacula conio support: yes -ltinfo
> readline support: no
> TCP Wrappers support: yes -lwrap
> * TLS support: yes*
> Encryption support: yes
> ZLIB support: yes
> LZO support: yes
>
>
> So I think you should use option --with-openssl only if you have installed
> openssl from source
>
> On Thu, Mar 3, 2016 at 12:41 PM, Alex Domoradov <alex....@gmail.com>
> wrote:
>
>> AFAIK it wouldn't work
>>
>> a binary file must be linked with openssl
>>
>> # ldd bacula-dir | grep ssl
>> libssl.so.10 => /usr/lib64/libssl.so.10 (0x00007f3a83283000)
>> libssl3.so => /usr/lib64/libssl3.so (0x00007f3a80089000)
>>
>> On Thu, Mar 3, 2016 at 12:30 PM, Florian Splett < <florian.spl...@web.de>
>> florian.spl...@web.de> wrote:
>>
>>> Hello.
>>>
>>> I want to set up TLS security for my bacula system, but when I first
>>> installed the system, I did not specify the "--with-openssl" option.
>>> Will the TLS configuration still work? The entries in the config were
>>> definitely recognized.
>>>
>>> I just want to be sure this doesn't end up accepting the configuration,
>>> but not actually securing anything,
>>> so any answer would be highly appreciated.
>>>
>>> Regards,
>>> Florian S.
>>>
>>>
>>> ------------------------------------------------------------------------------
>>> Site24x7 APM Insight: Get Deep Visibility into Application Performance
>>> APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
>>> Monitor end-to-end web transactions and take corrective actions now
>>> Troubleshoot faster and improve end-user experience. Signup Now!
>>> http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140
>>> _______________________________________________
>>> Bacula-users mailing list
>>> Bacula-users@lists.sourceforge.net
>>> https://lists.sourceforge.net/lists/listinfo/bacula-users
>>>
>>
>>
>
>
>
> ------------------------------------------------------------------------------
> Transform Data into Opportunity.
> Accelerate data analysis in your applications with
> Intel Data Analytics Acceleration Library.
> Click to learn more.
> http://makebettercode.com/inteldaal-eval
> _______________________________________________
> Bacula-users mailing list
> Bacula-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/bacula-users
>
>
------------------------------------------------------------------------------
Transform Data into Opportunity.
Accelerate data analysis in your applications with
Intel Data Analytics Acceleration Library.
Click to learn more.
http://makebettercode.com/inteldaal-eval
_______________________________________________
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users
