Bacula-users

Re: [Bacula-users] Client Password based data encryption.

2012-02-16 15:12:42
Subject: Re: [Bacula-users] Client Password based data encryption.
From: Thomas Mueller <thomas AT chaschperli DOT ch>
To: bacula-users AT lists.sourceforge DOT net
Date: Thu, 16 Feb 2012 10:01:24 +0000 (UTC)
Am Wed, 15 Feb 2012 11:07:40 +0200 schrieb Wassim Zaarour:

> Hello,
> 
> Currently the data encryption option in Bacula is based on certificates,
> meaning that if the person creating the certificates for the client
> keeps his copy of the certs, he is able to restore and decrypt the data
> without the users approval, since some people want their data
> undecryptable by absolutely anyone but them, I was wondering if there is
> a way to encrypt data using a password that only the client knows, or of
> there any ideas how to achieve this.
> 

let the user himself create the encryption cert and try to use only the 
public-key in the sd. 

In theory encryption does just need the public-key. Encrypting needs the 
private key. but I don't know if it is possible to provide only the 
public key to bacula-sd.

- Thomas


------------------------------------------------------------------------------
Virtualization & Cloud Management Using Capacity Planning
Cloud computing makes use of virtualization - but cloud computing 
also focuses on allowing computing to be delivered as a service.
http://www.accelacomm.com/jaw/sfnl/114/51521223/
_______________________________________________
Bacula-users mailing list
Bacula-users AT lists.sourceforge DOT net
https://lists.sourceforge.net/lists/listinfo/bacula-users