STUNNEL RSA KEY EXAMPLE HOW TO
STUNNEL RSA KEY EXAMPLE MANUAL

Since pictures usually help a lot, here is an overview of what we will be doing. None of the other conf files need to be changed. To accomplish this, we will need to construct four separate conf files for stunnel, and we will need to make some minor modifications to the Director's conf file. This may sound a bit complicated, but it really isn't. The encryption is accomplished between the Director and the File daemon by using an stunnel on the Director's machine (server) to encrypt the data and to contact an stunnel on the File daemon's machine (client), which decrypts the data and passes it to the client.īetween the File daemon and the Storage daemon, we use an stunnel on the File daemon's machine to encrypt the data and another stunnel on the Storage daemon's machine to decrypt the data.Īs a consequence, there are actually four copies of stunnel running, two on the server and two on the client. listens for the Director to contact it), and the Storage daemon is a server to the File daemon. This is the typical server/client view of the world, the File daemon is a server to the Director (i.e. The File daemon then contacts the Storage daemon using the address and port parameters supplied by the Director. This example was developed between two Linux machines running stunnel version 4.04-4 on a Red Hat Enterprise 3.0 system.įirst, you must know that with the standard Bacula configuration, the Director will contact the File daemon on port 9102. Although the details may be slightly different, the same principles apply whether you are encrypting between Unix, Linux, or Win32 machines. We assume the Director and the Storage daemon are running on one machine that will be called server and the Client or File daemon is running on a different machine called client.

STUNNEL RSA KEY EXAMPLE HOW TO

This chapter will show you how to use stunnel to encrypt communications to your client programs. Without too much effort, it is possible to encrypt the communications between any of the daemons.

STUNNEL RSA KEY EXAMPLE MANUAL

Please see the TLS chapter of the Bacula Enterprise Main Manual if you are using Bacula 1.37 or greater. Prior to version 1.37, Bacula did not have built-in communications encryption.

Using stunnel to Encrypt to a Second Client.Starting and Testing the Control Channel.Stunnel Configuration for the Control Channel.Starting and Testing the Data Encryption.Stunnel Configuration for the Data Channel.Next: Bacula Projects Up: Miscellaneous Guide Previous: Variable Expansion Contents Index

Stunnel rsa key example