I plan to setup Data Encryption for some File-Daemons and started to
read and follow:
https://docs.baculasystems.com/BEAdvancedFeaturesUsage/DataEncryption/FileDaemonEncryption/GeneratingEncryptionKeys/index.html
The text says:
"Save these files (master.key and master.cert) as you will need them to
create File Daemon keys or in case you loose the File Daemon keys."
But the following example of generating the File Daemon Key Pair does
not depend on any of the two files master.key and master.cert
I would expect the FD-keypair to be somehow signed by the master?
In
https://docs.baculasystems.com/BEAdvancedFeaturesUsage/DataEncryption/FileDaemonEncryption/ExampleDataEncryptionConfiguration/index.html
there is:
PKI Keypair = "/opt/bacula/etc/fd-example.pem" # Public and
Private Keys
PKI Master Key = "/opt/bacula/etc/master.cert" # ONLY the Public Key
but the fd-example.pem is in my opinion cryptographically not related to
master.cert at all, if following the commands on
https://docs.baculasystems.com/BEAdvancedFeaturesUsage/DataEncryption/FileDaemonEncryption/GeneratingEncryptionKeys/index.html
I'd like to be 100% sure to set this up correctly. Pls advise if I
misunderstand or if the commands should be slightly different.
Thanks
_______________________________________________
Bacula-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/bacula-users
