Bacula-users

Re: [Bacula-users] need help (step by step) for setting up certificates

2011-07-25 00:56:05
Subject: Re: [Bacula-users] need help (step by step) for setting up certificates
From: scar <scar AT drigon DOT com>
To: bacula-users AT lists.sourceforge DOT net
Date: Sun, 24 Jul 2011 21:52:47 -0700
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Mike Hobbs @ 07/24/2011 06:15 PM:
> On 7/23/2011 3:56 PM, scar wrote:
>> -----BEGIN PGP SIGNED MESSAGE-----
>> i want to set up certificates for secure communication between my
>> director and clients.  i've read several guides including the info on
>> bacula.org, but i am so confused how to do it.
> 
> This is not my website, but I configured TLS following this site and it 
> all works on my end.
> 
> http://www.devco.net/pubwiki/Bacula/TLS/
> 

thanks.  one big thing that the author points out there:

<!> It is very important that under the Common Name field you specify
the full hostname of the machine in question, this has to be the
hostname you use in your Storage, Client, Director etc configuration
sections, if these do not match you will get a very confusing error
message.


this was where my initial confusion was.  it seems that after i
re-created the certificates using a CN of "home1.local" i've now got the
TLS communication between the Director and bconsole working.  apparently
when i get to configuring my remote clients i'll need to use
work.dyndns.org for the CN on both remote clients since that will be the
address that i'll be specifying in the bacula config files.  *fingers
crossed*

-----BEGIN PGP SIGNATURE-----

iEYEAREIAAYFAk4s9p4ACgkQXhfCJNu98qB7tACg6TDvSClWHnlbkMjwhaCwuzIB
n3wAoLAC44qWVnt2JdeBkFMJhrhKeZVf
=rMN8
-----END PGP SIGNATURE-----


------------------------------------------------------------------------------
Storage Efficiency Calculator
This modeling tool is based on patent-pending intellectual property that
has been used successfully in hundreds of IBM storage optimization engage-
ments, worldwide.  Store less, Store more with what you own, Move data to 
the right place. Try It Now! http://www.accelacomm.com/jaw/sfnl/114/51427378/
_______________________________________________
Bacula-users mailing list
Bacula-users AT lists.sourceforge DOT net
https://lists.sourceforge.net/lists/listinfo/bacula-users