Bacula-users

[Bacula-users] encryption keys on backups

2011-04-15 11:15:54
Subject: [Bacula-users] encryption keys on backups
From: Pablo Marques <pmarques AT miamilinux DOT net>
To: bacula-users AT lists.sourceforge DOT net
Date: Fri, 15 Apr 2011 11:13:00 -0400 (EDT)
Does anybody know what happens if the generated encryption key pair expires? 
Will I be able to restore encrypted backups? 

openssl genrsa -out master.key 2048
openssl req -new -key master.key -x509 -out master.cert -days 1

openssl genrsa -out fd-test.key 2048
openssl req -new -key fd-test.key -x509 -out fd-test.cert -days 1

This keys will expire tomorrow.

A client will have this configuration, and I am backing it up today.

FileDaemon { 
Name = test-fd 
FDport = 9102 
WorkingDirectory = /var/bacula/working 
Pid Directory = /var/run 
Maximum Concurrent Jobs = 4 

PKI Signatures = Yes            # Enable Data Signing 
PKI Encryption = Yes            # Enable Data Encryption 
PKI Keypair = "/etc/bacula/test-fd.pem"    # Public and Private Keys 
PKI Master Key = "/etc/bacula/master.cert"    # ONLY the Public Key 
} 

Will I be able to restore this backup a few days from today? 

Pablo

------------------------------------------------------------------------------
Benefiting from Server Virtualization: Beyond Initial Workload 
Consolidation -- Increasing the use of server virtualization is a top
priority.Virtualization can reduce costs, simplify management, and improve 
application availability and disaster protection. Learn more about boosting 
the value of server virtualization. http://p.sf.net/sfu/vmware-sfdev2dev
_______________________________________________
Bacula-users mailing list
Bacula-users AT lists.sourceforge DOT net
https://lists.sourceforge.net/lists/listinfo/bacula-users

<Prev in Thread] Current Thread [Next in Thread>
  • [Bacula-users] encryption keys on backups, Pablo Marques <=