SearchFAQMemberlist Log in
Reply to topic Page 1 of 1
PKI decryption problem: missing private key
Author Message
Post PKI decryption problem: missing private key 
Hi,

we are trying to restore a backup of a client(let's call it A) to a
new machine(let's call it B). B is identical to A, which both have
centos 6.2 running and same version of bacula-fd running.

the public and private keys of A are stored in
/etc/bacula/fd-example.pem and /etc/bacula/master.cert, and these keys
are also copied at B at the same path.

in the bacula-fd.conf on both A and B, we use the following:

PKI Signatures = Yes
PKI Encryption = Yes
PKI Keypair = "/etc/bacula/fd-example.pem"
PKI Master Key = "/etc/bacula/master.cert"

OK, here is the problem:
- when we try to restore the backup from A to /tmp/bacula-restore in
A, it's fine.
- however, when we try to restore the backup from A to B, bconsole is
repeatly printing:

21-Jun 00:52 tvb_restore_test-fd JobId 397: Error: Missing private key
required to decrypt encrypted backup data.
21-Jun 00:52 tvb_restore_test-fd JobId 397: Error: Missing private key
required to decrypt encrypted backup data.
...

The keys in A are the same as the keys in B.(I did the md5sum to
verify that they are the same) and the permissions are the same too.

Please advise. Any suggestions or help will be appreciated.

Thank you!

Ricky

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and
threat landscape has changed and how IT managers can respond. Discussions
will include endpoint security, mobile security and the latest in malware
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
Bacula-users mailing list
Bacula-users < at > lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users

Post PKI decryption problem: missing private key 
Hello,
2012/6/21 Ricky Tong <rtong < at > research.baycrest.org ([email]rtong < at > research.baycrest.org[/email])>
Hi,

we are trying to restore a backup of a client(let's call it A) to a
new machine(let's call it B). B is identical to A, which both have
centos 6.2 running and same version of bacula-fd running.



What are the names of client A and B stored in bacula-fd.conf file?
 

best regards

--
Radosław Korzeniewski
radoslaw < at > korzeniewski.net ([email]radoslaw < at > korzeniewski.net[/email])

Post PKI decryption problem: missing private key 
Hi Radoslaw,

How is that relevant? (Maybe I am missing something here).

Thanks again.

Ricky





On 22/06/2012 6:58 AM, Radosław Korzeniewski wrote: Hello,
2012/6/21 Ricky Tong <rtong < at > research.baycrest.org ([email]rtong < at > research.baycrest.org[/email])>
Hi,

we are trying to restore a backup of a client(let's call it A) to a
new machine(let's call it B). B is identical to A, which both have
centos 6.2 running and same version of bacula-fd running.



What are the names of client A and B stored in bacula-fd.conf file?
 

best regards

--
Radosław Korzeniewski
radoslaw < at > korzeniewski.net ([email]radoslaw < at > korzeniewski.net[/email])




Post PKI decryption problem: missing private key 
Hello Ricky,

2012/6/22 Ricky Tong <rtong < at > research.baycrest.org ([email]rtong < at > research.baycrest.org[/email])>
Hi Radoslaw,

How is that relevant? (Maybe I am missing something here).




Could you, please answer the question: "What are the names of client A and B stored in bacula-fd.conf file?"


If no, I cant help you. Sorry.


best regards

--
Radosław Korzeniewski
radoslaw < at > korzeniewski.net ([email]radoslaw < at > korzeniewski.net[/email])

Post PKI decryption problem: missing private key 
I think that you need to use the master.pem or the fd-example.pem that is on A if you want to restore on B
Dont forget to restart the File Daemon on B after config modifications

Hugo


Le 21 juin 2012 à 22:43, Ricky Tong a écrit :

Hi,

we are trying to restore a backup of a client(let's call it A) to a
new machine(let's call it B). B is identical to A, which both have
centos 6.2 running and same version of bacula-fd running.

the public and private keys of A are stored in
/etc/bacula/fd-example.pem and /etc/bacula/master.cert, and these keys
are also copied at B at the same path.

in the bacula-fd.conf on both A and B, we use the following:

PKI Signatures = Yes
PKI Encryption = Yes
PKI Keypair = "/etc/bacula/fd-example.pem"
PKI Master Key = "/etc/bacula/master.cert"

OK, here is the problem:
- when we try to restore the backup from A to /tmp/bacula-restore in
A, it's fine.
- however, when we try to restore the backup from A to B, bconsole is
repeatly printing:

21-Jun 00:52 tvb_restore_test-fd JobId 397: Error: Missing private key
required to decrypt encrypted backup data.
21-Jun 00:52 tvb_restore_test-fd JobId 397: Error: Missing private key
required to decrypt encrypted backup data.
...

The keys in A are the same as the keys in B.(I did the md5sum to
verify that they are the same) and the permissions are the same too.

Please advise. Any suggestions or help will be appreciated.

Thank you!

Ricky

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and
threat landscape has changed and how IT managers can respond. Discussions
will include endpoint security, mobile security and the latest in malware
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
Bacula-users mailing list
Bacula-users < at > lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users


------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and
threat landscape has changed and how IT managers can respond. Discussions
will include endpoint security, mobile security and the latest in malware
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
Bacula-users mailing list
Bacula-users < at > lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users

Post  
Sure. Here are the names of client A and client B that are stored in bacula-fd.conf file?

the name of Client A: tvb-fd
the name of Client B: tvb_restore_test-fd



recap the situation:
backup from A can be restored on A
backup from B can be restored on B
backup from A cannot be restored on B

keys(fd-example.pem and master.cert)are the same on both A and B, which are located in /etc/bacula/ on both machines.

both A and B are virtualboxes(oracle) from the same physical machine with different SSH ports. OS and bacula-client versions are identical.



any insights will be helpful.

Thanks again.

Ricky

View user's profile Send private message
Display posts from previous:
Reply to topic Page 1 of 1
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
  


Magic SEO URL for phpBB