Re: [Bacula-users] TLS Config Problem (FD did not advertise required TLS support.)

2016-06-07 Thread Ana Emília M . Arruda
Hi Francisco, Sorry for my delay. Yes, sure you can! You should configure TLS Enable = yes and TLS Require = yes for the clients in the VPN network. All the others that will surely not use TLS, you can set TLS Enable = No. Best regards, Ana On Mon, May 30, 2016 at 10:58 AM, Francisco Javier Fun

Re: [Bacula-users] TLS Config Problem (FD did not advertise required TLS support.)

2016-05-30 Thread Francisco Javier Funes Nieto
Hi Ana, My question is: Can I have a mixed set of clients with TLS enabled and others with no TLS ? The clients into my LAN doesn't need the TLS support but all in the VPN network must use TLS. J. 2016-05-30 10:25 GMT+02:00 Ana Emília M. Arruda : > Hi Javier, > > Yes, sure. If you c

Re: [Bacula-users] TLS Config Problem (FD did not advertise required TLS support.)

2016-05-30 Thread Ana Emília M . Arruda
Hi Javier, Yes, sure. If you configure TLS Require = No, if any of the daemons host do not speak TLS, they will communicate with no encryption (ssl=0). Regards, Ana On Sun, May 29, 2016 at 12:27 PM, Francisco Javier Funes Nieto < esen...@gmail.com> wrote: > Hi Ana, > > The problem now it's solv

Re: [Bacula-users] TLS Config Problem (FD did not advertise required TLS support.)

2016-05-29 Thread Francisco Javier Funes Nieto
Hi Ana, The problem now it's solved. There was an incomplete configuration of the Storage Daemon and Director TLS subset. I have a cuestion around this, Can I have a mixed enviroment with TLS and Non-TLS clients in the same Bacula server? J. 2016-05-27 22:35 GMT+02:00 Ana Emília M. Arruda : >

Re: [Bacula-users] TLS Config Problem (FD did not advertise required TLS support.)

2016-05-27 Thread Ana Emília M . Arruda
Hello Javier, Did you solve this? ssl=0 means that no TLS connection is being used. Since TLS Require = no for both director and storage daemon, it seems that they are unable to establish one and then are communicating with no encryption. You can always run tests to verify your certificates: op