Hi Hugh,

Thanks for the fast reply. I forgot to post my config. Here they are:

bacula-dir.conf:

Director {                            # define myself
    Name = bacula-dir
    DIRport = 9101                # where we listen for UA connections
    QueryFile = "/etc/bacula/scripts/query.sql"
    WorkingDirectory = "/var/lib/bacula"
    PidDirectory = "/var/run/bacula"
    Maximum Concurrent Jobs = 1
    Password = "secret"         # Console password
    Messages = Daemon
    DirAddress = 192.168.99.55

    TLS Enable              = yes
    TLS Require             = yes
    TLS Verify Peer         = yes
    TLS Allowed CN          = "192.168.99.55"
    TLS CA Certificate File = /etc/bacula/certs/CA.pem
    # This is a server certificate, used for incoming console connections.
    TLS Certificate         = /etc/bacula/certs/bacula-dir-tls-cert.pem
    TLS Key                 = /etc/bacula/certs/bacula-dir-tls-key.pem
}

bconsole.conf:

Director {
    Name                    = bacula-dir
    DIRport                 = 9101
    address                 = 192.168.99.55
    Password                = "secret"
    TLS Enable              = yes
    TLS Require             = yes
    TLS CA Certificate File = /etc/bacula/certs/CA.pem
    TLS Certificate         =
/etc/bacula/certs/bacula-dir-tls-client-cert.pem
    TLS Key                 =
/etc/bacula/certs/bacula-dir-tls-client-key.pem
}


I did read the article on devco.net. ;) That made me try the TLS from step
by step, started with the communication between the director and the
bconsole. :) Great documentation, but it did not helped me. :(

cheers,
Zsolt

On Wed, Mar 24, 2010 at 7:05 PM, Hugh Brown <hbr...@chibi.ubc.ca> wrote:

> Zsolt Kozak wrote:
> > Do you have any idea what's wrong? It's interesting that the
> TLS-connection
> > is OK on the server side, only the bconsole has problems with it....
>
> Are you able to post the relevant parts of bacula-dir.conf and
> bconsole.conf?  Seeing which certs are specified where might help.
>
> Also: it's not specific to your problem, but have a look at:
>
>        http://www.devco.net/pubwiki/Bacula/TLS/
>
> It's the best documentation I found on Bacula and TLS.
>
> Thanks,
> Hugh
>
> --
> Hugh Brown, Systems Manager
> The Centre for High-Throughput Biology
> hbr...@chibi.ubc.ca
>
------------------------------------------------------------------------------
Download Intel&#174; Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev
_______________________________________________
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users

Reply via email to