Re: [Bacula-users] data key rollover strategy

2015-11-19 Thread Marcin Haba
Hello Devin, 2015-11-19 0:17 GMT+01:00 Devin Reade : > My alerting system tells me that I have some file daemons that have been > merrily encrypting their data for quite a while. In particular, the > expiry dates for the data encryption x509 certs are coming up soon. You can renew

Re: [Bacula-users] data key rollover strategy

2015-11-19 Thread Martin Simmons
> On Thu, 19 Nov 2015 09:15:36 -0700, Devin Reade said: > > > Some time ago I prepared a few diagrams that show Bacula data > > encryption algorighm. Here are the diagrams in English version: > > > > http://www.bacula.pl/data_encryption.html > > That diagram is a bit simplified in that it

[Bacula-users] stat problems

2015-11-19 Thread Craig Shiroma
Hello, I came across a problem with a Windows 2012R2 server that generated the below error messages in the log. The full backed up only a few megabytes when it should've backed up 10G obviously because of the below problems. However, I ran another full right after noticing the problem without

Re: [Bacula-users] data key rollover strategy

2015-11-19 Thread Devin Reade
--On Thursday, November 19, 2015 10:49:07 AM +0100 Marcin Haba wrote: > You can renew your certs. True, as long as you're ok with using the old key. However t won't work, for example, if you need to expand your key size. > I think that important is understand that data

Re: [Bacula-users] data key rollover strategy

2015-11-19 Thread Martin Simmons
> On Wed, 18 Nov 2015 16:17:20 -0700, Devin Reade said: > > My alerting system tells me that I have some file daemons that have been > merrily encrypting their data for quite a while. In particular, the > expiry dates for the data encryption x509 certs are coming up soon. > > Well, this

Re: [Bacula-users] data key rollover strategy

2015-11-19 Thread Heitor Faria
>> On Wed, 18 Nov 2015 16:17:20 -0700, Devin Reade said: >> >> My alerting system tells me that I have some file daemons that have been >> merrily encrypting their data for quite a while. In particular, the >> expiry dates for the data encryption x509 certs are coming up soon. >> >> Well,