bareos: master 4b2b7d73

Diff Back to Repository
Author Committer Branch Timestamp Parent
mvwieringen mvwieringen master 2015-04-17 21:08 master 04818202 Pending
Changeset Fileset encryption overhaul.

This patch adds the following changes:
   - Add new fileset option that forces encryption.
     This new fileset option will fail a backup when encryption is not
     enabled at the client side for a backup.
   - Implement the encryption=<cipher> fileset option which was as it
     seems available but never implemented in the fileset exchange protocol
     between the director and the filed.

In the new setup things work like this:
   - When in compat mode we always fall back to CRYPTO_CIPHER_AES_128_CBC
   - When the fileset has a crypto cipher set we use that one.
     Only one cipher can be set for a backup so multiple ciphers in one
     fileset will give a fatal error.
   - When the fileset has no encryption cipher override the global configured
     encryption cipher is used.
   - When the encryption cipher is determined the force encryption fileset flag
     is checked to see if encryption is enabled for the backup.
mod - src/dird/inc_conf.c Diff File
mod - src/dird/inc_conf.h Diff File
mod - src/filed/backup.c Diff File
mod - src/filed/crypto.c Diff File
mod - src/filed/dir_cmd.c Diff File
mod - src/filed/filed_conf.c Diff File
mod - src/filed/fileset.c Diff File
mod - src/filed/protos.h Diff File
mod - src/findlib/find.h Diff File
mod - src/findlib/match.c Diff File
mod - src/include/fileopts.h Diff File
mod - src/lib/crypto.h Diff File
mod - src/lib/crypto_openssl.c Diff File