[Megoldva] Bacula TLS

Fórumok

Sziasztok!

Baculával szenvedünk. Minden működik TLS nélkül. TLS-el a Bacula-dir, Bacula-SD, Bacula console működik, viszont a kliens Bacula-FD képtelen a Bacula-dir-el kommunikálni.
Help!

Íme a konf-ok:

Kliens:

Director {
Name = virtualtest-dir
Password = "1"
Address = 192.168.0.150
TLS Enable = yes
TLS Require = yes
TLS Verify Peer = no
TLS Allowed CN = "bacula.domain.hu"
TLS CA Certificate File = /etc/bacula/ssl/cacert.pem
TLS Certificate = /etc/bacula/ssl/bacula.domain.hu-cacert.pem
TLS Key = /etc/bacula/ssl/cacert-nopass.key
}

FileDaemon { # this is me
Name = deb-lenny-fd
FDport = 9102 # where we listen for the director
WorkingDirectory = /var/lib/bacula
Pid Directory = /var/run/bacula
Maximum Concurrent Jobs = 20
FDAddress = 192.168.0.51
}

Messages {
Name = Standard
director = virtualtest-dir = all, !skipped, !restored
}

Szerver:

Client {
Name = deb-lenny
Address = deb-lenny
FDPort = 9102
Catalog = MyCatalog
Password = "1" # password for FileDaemon 2
File Retention = 30 days # 30 days
Job Retention = 6 months # six months
AutoPrune = yes # Prune expired Jobs/Files
TLS Enable = yes
# TLS Require = yes
TLS Require = no
TLS Allowed CN = "bacula.domain.hu"
TLS CA Certificate File = /etc/bacula/ssl/cacert.pem
TLS Certificate = /etc/bacula/ssl/bacula.domain.hu-cacert.pem
TLS Key = /etc/bacula/ssl/cacert-nopass.key
}

Hozzászólások

Nem akarok nagy hülyeséget írni, de úgy rémlik, hogy az fqdn -re kell szólnia a certnek a kliensen is, ezért érdemes wildcard certet használni.

----
올드보이
http://molnaristvan.eu/