Bacula TLS how-to?

yanik · 09-15-2006, 02:34 PM

I'm trying to get encryption working in Bacula.

As the documentation states, I issued

Code:

openssl req -new -x509 -nodes -out bacula.pem -keyout bacula.pem -days 3650

Now what? There seems to be a lot of options. What are the ones really needed?

I guess I really need:

Code:

TLS Enable = yes
TLS Require = yes
TLS Certificate = /etc/bacula/bacula.pem

Now that should go in bacula-dir.conf and bacula-sd.conf, but what about remote bacula-fd? Do I have to copy my bacula.pem there?

I just want simple encryption so I can do backups thru the web.

Yanik

ahedler · 10-06-2006, 02:13 AM

My guess is that if you have it on the director and the storage, you'll need it on the fd also, otherwise they won't speak the same language, so to speak. Haven't tried that on my bacula yet, so I'm guessing, but I'm pretty sure it must be on all of them.