Re: configure AES256 data encryption using PKI

Hi Enzo,

Am 03.12.2025 um 10:32 schrieb Enzo Renatto Serafini Samaniego:
> Hello Community,
> 
> I'm attempting to configure *AES256 data encryption* using PKI and 
> simultaneously upgrade the data integrity signature from *MD5* to 
> *SHA256*. I am using *Bacula Community version 11.0.6* on *CentOS 7*. My 
> Bacula Catalog uses a *PL/SQL-based (Oracle) database*.

This must be a heavily modified version of Bacula; I'm not aware we ever 
had a working Oracle catalog database backend.

> I have completed the generation and exchange of OpenSSL certificates 
> successfully, but the Bacula parser consistently throws a Keyword not 
> permitted in this resource error on the PKI directives. This suggests a 
> syntax breakdown that I cannot resolve.
> 
> Below, I detail the configuration and the errors encountered:
> 
> ------------------------------------------------------------------------
> 
> *1. **⚙**️ Implemented Configuration Changes*
> 
> I have modified two key files on the Director and File Daemon.
> 
> *A. bacula-dir.conf (Director)*
> 
> I added the PKI directives within their respective resources. The error 
> is reported on the line where I start using PkiDirectory in the Director 
> resource.
> 
> Fragmento de código
> 
> Director {
> 
>    Name = bacula-dir
> 
>    DIRport = 9101
> 
>    QueryFile = "[PATH]/query.sql"
> 
>    WorkingDirectory = "[PATH]/working"
> 
>    Password = "[DIR_PASSWORD]"
> 
>    Messages = Daemon
> 
>    PkiDirectory = /etc/bacula/ssl          # <--- ERROR REPORTED HERE

This directive is neither documented in the manual I have in front of 
me, nor does it appear in the souce code I just looked at:

bacula/src/dird$ grep -i pkidirectory * ; echo $?
1


I suspect you should start identifying what software you actually run. I 
think it's unlikely to be the Bacula I know.

Cheers,

Arno

-- 
Arno Lehmann

IT-Service Lehmann
Sandstr. 6, 49080 Osnabrück



_______________________________________________
Bacula-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/bacula-users