-\section*{Bacula -- Data Encryption}
+\chapter{Data Encryption}
\label{DataEncryption}
\index[general]{Data Encryption}
\index[general]{Encryption!Data}
\index[general]{Data Encryption}
-\addcontentsline{toc}{section}{Data Encryption}
Bacula permits file data encryption and signing within the File Daemon (or
Client) prior to sending data to the Storage Daemon. Upon restoration,
\end{enumerate}
-\subsection*{Building Bacula with Encryption Support}
+\section{Building Bacula with Encryption Support}
\index[general]{Building Bacula with Encryption Support}
-\addcontentsline{toc}{subsection}{Building Bacula with Encryption Support}
The configuration option for enabling OpenSSL encryption support has not changed
since Bacula 1.38. To build Bacula with encryption support, you will need
./configure --with-openssl ...
\end{verbatim}
-\subsection*{Encryption Technical Details}
+\section{Encryption Technical Details}
\index[general]{Encryption Technical Details}
-\addcontentsline{toc}{subsection}{Encryption Technical Details}
The implementation uses 128bit AES-CBC, with RSA encrypted symmetric
session keys. The RSA key is user supplied.
streaming DER decoder/encoder was not available.
-\subsection*{Generating Private/Public Encryption Keypairs}
+\section{Generating Private/Public Encryption Keys}
\index[general]{Generating Private/Public Encryption Keypairs}
-\addcontentsline{toc}{subsection}{Generating Private/Public Encryption Keypairs}
Generate a Master Key Pair with:
\normalsize
-\subsection*{Example Data Encryption Configuration}
+\section{Example Data Encryption Configuration}
\index[general]{Example!File Daemon Configuration File}
\index[general]{Example!Data Encryption Configuration File}
\index[general]{Example Data Encryption Configuration}
-\addcontentsline{toc}{subsection}{Example Data Encryption Configuration}
{\bf bacula-fd.conf}