possible for the director to restore new keys or a Bacula configuration
file to the client, and thus force later backups to be made with a
compromised key and/or with no encryption at all. You can avoid this by
- not not changing the location of the keys in your Bacula File daemon
+ not changing the location of the keys in your Bacula File daemon
configuration file, and not changing your File daemon keys. If you do
change either one, you must ensure that no restore is done that restores
the old configuration or the old keys. In general, the worst effect of
\begin{itemize}
\item Concatenate the master private and public key into a single
keypair file, ie:
- cat master.key master.cert >master.keypair
+ cat master.key master.cert \gt master.keypair
\item 2) Set the PKI Keypair statement in your bacula configuration file: