Am 17.02.25 um 14:14 schrieb Adam Weremczuk:
Does Bacula 9.6.7 (from Debian 11 repository) likely support backups encryption out of the box?Or do I need to compile it with ./configure --with-openssl ? How do I check if encryption is currently available? I'm using it with LTO-8 ULTRIUM-HH8 external tape drive. --- Adam
If you like to try software encryption these are my lines. From ancient times
and written down from memory... It positively worked with v9.
Cheers, Udo
openssl req -x509 -nodes -days 3650 -newkey rsa:2048 -keyout
/etc/ssl/private/my.key -out /etc/ssl/private/my.cert
openssl req -x509 -nodes -days 3650 -newkey rsa:2048 -keyout
/etc/ssl/private/customer.key -out /etc/ssl/private/customer.cert
openssl req -x509 -nodes -days 3650 -newkey rsa:2048 -keyout
/etc/ssl/private/server-fd.key -out /etc/ssl/private/server-fd.cert
mkdir -p /etc/bacula/pki
cp /etc/ssl/private/server-fd.key /etc/bacula/pki/server-fd.pem
cat /etc/ssl/private/server-fd.cert >> /etc/bacula/pki/server-fd.pem
cp /etc/ssl/private/my.cert /etc/bacula/pki/my.cert
cp /etc/ssl/private/customer.cert /etc/bacula/pki/customer.cert
bacula-fd.conf:
FileDaemon {
...
PKI Signatures = yes
PKI Encryption = yes
PKI Keypair = "/etc/bacula/pki/server-fd.pem"
PKI MasterKey = "/etc/bacula/pki/customer.cert"
PKI MasterKey = "/etc/bacula/pki/my.cert"
...
}
compile-bacula.sh:
#!/bin/sh
#
mkdir -p /usr/local/bin/bacula
mkdir -p /etc/bacula
mkdir -p /var/lib/bacula
CFLAGS="-g -Wall" \
./configure \
--sbindir=/usr/local/bin/bacula \
--sysconfdir=/etc/bacula \
--with-pid-dir=/var/run \
--with-subsys-dir=/var/lib/bacula \
--enable-smartalloc \
--enable-conio \
--with-mysql \
--disable-static-tools \
--with-working-dir=/var/lib/bacula \
--with-dump-email=custo...@mail.tld \
--with-job-email=custo...@mail.tld \
--with-smtp-host=my.smtp.tld \
--with-openssl
exit 0
--
Bitte denken Sie an die Umwelt, bevor Sie Mails drucken.
Please consider the environment before printing mails.
--
iNet Integrative Netzwerke Udo Kaune e.K.
Deichstraße 6
25335 Elmshorn
Tel: +49 (4121) 579 69 35
Fax: +49 (4121) 579 69 99
Web:http://www.inet-hamburg.de
Handelsregister Pinneberg: HRA 1509 EL
smime.p7s
Description: Kryptografische S/MIME-Signatur
_______________________________________________ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
