From 05bdc06df21b29620493b560ae2713250325e518 Mon Sep 17 00:00:00 2001
From: Kern Sibbald <kern@sibbald.com>
Date: Sat, 23 Jun 2007 07:46:19 +0000
Subject: [PATCH] Add Frank Sweetser's tls test

git-svn-id: https://bacula.svn.sourceforge.net/svnroot/bacula/trunk@5065 91ce42f0-d328-0410-95d8-f526ca767f89
---
 regress/scripts/do_sed                 |   4 +
 regress/scripts/tls-CA.pem             |  37 +++
 regress/scripts/tls-bacula-dir.conf.in | 379 +++++++++++++++++++++++++
 regress/scripts/tls-bacula-fd.conf.in  |  41 +++
 regress/scripts/tls-cert.pem           | 357 +++++++++++++++++++++++
 regress/tests/tls-test                 |  49 ++++
 6 files changed, 867 insertions(+)
 create mode 100644 regress/scripts/tls-CA.pem
 create mode 100644 regress/scripts/tls-bacula-dir.conf.in
 create mode 100644 regress/scripts/tls-bacula-fd.conf.in
 create mode 100644 regress/scripts/tls-cert.pem
 create mode 100755 regress/tests/tls-test

diff --git a/regress/scripts/do_sed b/regress/scripts/do_sed
index 5e27327078..43ff860cf1 100755
--- a/regress/scripts/do_sed
+++ b/regress/scripts/do_sed
@@ -63,6 +63,10 @@ sed -f ${out} ${cwd}/scripts/cleanup-2drive.in >${cwd}/scripts/cleanup-2drive
 sed -f ${out} ${cwd}/scripts/prepare-two-tapes.in >${cwd}/scripts/prepare-two-tapes
 sed -f ${out} ${cwd}/scripts/bacula-dir.conf.testrunscript.in >${cwd}/scripts/bacula-dir.conf.testrunscript
 
+sed -f ${out} ${cwd}/scripts/tls-bacula-fd.conf.in >${cwd}/scripts/tls-bacula-fd.conf
+sed -f ${out} ${cwd}/scripts/tls-bacula-sd.conf.in >${cwd}/scripts/tls-bacula-sd.conf
+sed -f ${out} ${cwd}/scripts/tls-bacula-dir.conf.in >${cwd}/scripts/tls-bacula-dir.conf
+
 cp ${cwd}/bin/bacula-sd.conf /tmp/bac$$
 sed s%/tmp%${cwd}/tmp%g /tmp/bac$$ >${cwd}/bin/bacula-sd.conf
 chmod 777 ${cwd}/scripts/cleanup-*tape ${cwd}/scripts/cleanup-*drive ${cwd}/scripts/prepare-two-tapes
diff --git a/regress/scripts/tls-CA.pem b/regress/scripts/tls-CA.pem
new file mode 100644
index 0000000000..dc8d89a319
--- /dev/null
+++ b/regress/scripts/tls-CA.pem
@@ -0,0 +1,37 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/regress/scripts/tls-bacula-dir.conf.in b/regress/scripts/tls-bacula-dir.conf.in
new file mode 100644
index 0000000000..259d3d2107
--- /dev/null
+++ b/regress/scripts/tls-bacula-dir.conf.in
@@ -0,0 +1,379 @@
+#
+# Default Bacula Director Configuration file
+#
+#  The only thing that MUST be changed is to add one or more
+#   file or directory names in the Include directive of the
+#   FileSet resource.
+#
+#  For Bacula release 1.39 or later
+#
+#  You might also want to change the default email address
+#   from root to your address.  See the "mail" and "operator"
+#   directives in the Messages resource.
+#
+
+Director {                            # define myself
+  Name = @hostname@-dir
+  DIRport = 8101                # where we listen for UA connections
+  QueryFile = "@scriptdir@/query.sql"
+  WorkingDirectory = "@working_dir@"
+  PidDirectory = "@piddir@"
+  SubSysDirectory = "@subsysdir@"
+  Maximum Concurrent Jobs = 4
+  Password = "pNvX1WiXnwv2C/F7E52LGvw6rKjbbPvu2kyuPa9pVaL3"         # Console password
+  Messages = Standard
+}
+
+#
+# Define the main nightly save backup job
+#   By default, this job will back up to disk in /tmp
+Job {
+  Name = "NightlySave"
+  Type = Backup
+  Client=@hostname@-fd 
+  FileSet="Full Set"
+  Storage = File
+  Messages = Standard
+  Pool = Default
+  Write Bootstrap = "@working_dir@/NightlySave.bsr"
+  Maximum Concurrent Jobs = 4
+  SpoolData=yes
+}
+
+Job {
+  Name = "MonsterSave"
+  Type = Backup
+  Client=@hostname@-fd 
+  FileSet="Full Set"
+  Storage = File1
+  Messages = Standard
+  Pool = Default
+  Write Bootstrap = "@working_dir@/NightlySave.bsr"
+}
+
+
+Job {
+  Name = "VerifyVolume"
+  Type = Verify
+  Level = VolumeToCatalog
+  Client=@hostname@-fd 
+  FileSet="Full Set"
+  Storage = File
+  Messages = Standard
+  Pool = Default
+  Write Bootstrap = "@working_dir@/NightlySave.bsr"
+}
+
+
+Job {
+  Name = "SparseTest"
+  Type = Backup
+  Client=@hostname@-fd 
+  FileSet="SparseSet"
+  Storage = File
+  Messages = Standard
+  Pool = Default
+  Write Bootstrap = "@working_dir@/NightlySave.bsr"
+}
+
+Job {
+  Name = "CompressedTest"
+  Type = Backup
+  Client=@hostname@-fd 
+  FileSet="CompressedSet"
+  Storage = File
+  Messages = Standard
+  Pool = Default
+  Maximum Concurrent Jobs = 4
+  Write Bootstrap = "@working_dir@/NightlySave.bsr"
+}
+
+Job {
+  Name = "SparseCompressedTest"
+  Type = Backup
+  Client=@hostname@-fd 
+  FileSet="SparseCompressedSet"
+  Storage = File
+  Messages = Standard
+  Pool = Default
+  Write Bootstrap = "@working_dir@/NightlySave.bsr"
+}
+
+Job {
+  Name = "FIFOTest"
+  Type = Backup
+  Client=@hostname@-fd 
+  FileSet="FIFOSet"
+  Storage = File
+  Messages = Standard
+  Pool = Default
+  Write Bootstrap = "@working_dir@/NightlySave.bsr"
+  ClientRunBeforeJob = "/bin/sleep 60"
+}
+
+
+
+# Backup the catalog database (after the nightly save)
+Job {
+  Name = "BackupCatalog"
+  Type = Backup
+  Client=@hostname@-fd 
+  FileSet="Catalog"
+#  Schedule = "WeeklyCycleAfterBackup"
+  Storage = File
+  Messages = Standard
+  Pool = Default
+  # This creates an ASCII copy of the catalog
+  RunBeforeJob = "@sbindir@/make_catalog_backup -u regress"
+  # This deletes the copy of the catalog
+  RunAfterJob  = "@sbindir@/delete_catalog_backup"
+  Write Bootstrap = "@working_dir@/BackupCatalog.bsr"
+}
+
+JobDefs {
+  Name = "BackupJob"
+  Type = Backup
+  Pool = Default
+  Storage = File
+  Messages = Standard
+  Priority = 10
+}
+
+Job {
+  JobDefs = "BackupJob"
+  Name = "bug621-job-1"
+  Client = @hostname@-fd
+  FileSet="Full Set"
+  ClientRunBeforeJob = "/bin/sleep 60"
+}
+
+Job {
+  JobDefs = "BackupJob"
+  Name = "bug621-job-2"
+  Client = @hostname@-fd
+  FileSet = "Full Set"
+  Max Run Time = 30
+  Priority = 15
+}
+
+
+# Standard Restore template, to be changed by Console program
+Job {
+  Name = "RestoreFiles"
+  Type = Restore
+  Client=@hostname@-fd 
+  FileSet="Full Set"
+  Storage = File
+  Messages = Standard
+  Pool = Default
+  Where = /tmp/bacula-restores
+}
+
+
+# List of files to be backed up
+FileSet {
+  Name = "Full Set"
+  Include {  Options { signature=MD5 }
+     File =  </tmp/file-list
+  }
+}
+
+FileSet {
+  Name = "SparseSet"
+  Include {
+    Options {
+      signature=MD5
+      sparse=yes
+    }
+    File = </tmp/file-list
+  }
+}
+
+FileSet {
+  Name = "CompressedSet"
+  Include {
+    Options {
+      signature=MD5 
+      compression=GZIP 
+    }
+    File = </tmp/file-list
+  }
+}
+
+FileSet {
+  Name = "FIFOSet"
+  Include {
+    Options {
+      readfifo = yes
+      signature=MD5 
+    }
+    File = </tmp/file-list
+  }
+}
+
+
+FileSet {
+  Name = "SparseCompressedSet"
+  Include {
+    Options {
+      signature=MD5 
+      compression=GZIP
+      sparse=yes
+    }
+    File = </tmp/file-list
+  }
+}
+
+
+
+#
+# When to do the backups, full backup on first sunday of the month,
+#  differential (i.e. incremental since full) every other sunday,
+#  and incremental backups other days
+Schedule {
+  Name = "WeeklyCycle"
+  Run = Level=Full 1st sun at 1:05
+  Run = Level=Differential 2nd-5th sun at 1:05
+  Run = Level=Incremental mon-sat at 1:05
+}
+
+# This schedule does the catalog. It starts after the WeeklyCycle
+Schedule {
+  Name = "WeeklyCycleAfterBackup"
+  Run = Level=Full sun-sat at 1:10
+}
+
+# This is the backup of the catalog
+FileSet {
+  Name = "Catalog"
+  Include {
+    Options {
+      signature=MD5
+    }
+    File = /home/kern/bacula/regress/bin/working/bacula.sql
+  }
+}
+
+# Client (File Services) to backup
+Client {
+  Name = @hostname@-fd
+  Address = @hostname@
+  FDPort = 8102
+  Catalog = MyCatalog
+  Password = "xevrjURYoCHhn26RaJoWbeWXEY/a3VqGKp/37tgWiuHc"          # password for FileDaemon
+  File Retention = 30d                # 30 days
+  Job Retention = 180d                # six months
+  AutoPrune = yes                     # Prune expired Jobs/Files
+  Maximum Concurrent Jobs = 4
+  TLS Require = yes
+  TLS Certificate = "@scriptdir@/tls-cert.pem"
+  TLS Key = "@scriptdir@/tls-cert.pem"
+  TLS CA Certificate File = "@scriptdir@/tls-CA.pem"
+}
+
+# Definiton of file storage device
+Storage {
+  Name = File
+  Address = @hostname@                # N.B. Use a fully qualified name here
+  SDPort = 8103
+  Password = "ccV3lVTsQRsdIUGyab0N4sMDavui2hOBkmpBU0aQKOr9"
+  Device = FileStorage
+  Media Type = File
+  Maximum Concurrent Jobs = 4
+  TLS Require = yes
+  TLS Certificate = "@scriptdir@/tls-cert.pem"
+  TLS Key = "@scriptdir@/tls-cert.pem"
+  TLS CA Certificate File = "@scriptdir@/tls-CA.pem"
+}
+
+Storage {
+  Name = File1
+  Address = @hostname@                # N.B. Use a fully qualified name here
+  SDPort = 8103
+  Password = "ccV3lVTsQRsdIUGyab0N4sMDavui2hOBkmpBU0aQKOr9"
+  Device = FileStorage1
+  Media Type = File1
+  Maximum Concurrent Jobs = 4
+  TLS Require = yes
+  TLS Certificate = "@scriptdir@/tls-cert.pem"
+  TLS Key = "@scriptdir@/tls-cert.pem"
+  TLS CA Certificate File = "@scriptdir@/tls-CA.pem"
+}
+
+
+# Definition of DLT tape storage device
+#Storage {
+#  Name = DLTDrive
+#  Address = @hostname@                # N.B. Use a fully qualified name here
+#  SDPort = 8103
+#  Password = "ccV3lVTsQRsdIUGyab0N4sMDavui2hOBkmpBU0aQKOr9"          # password for Storage daemon
+#  Device = "HP DLT 80"                # must be same as Device in Storage daemon
+#  Media Type = DLT8000                # must be same as MediaType in Storage daemon
+#}
+
+# Definition of DDS tape storage device
+#Storage {
+#  Name = SDT-10000
+#  Address = @hostname@                # N.B. Use a fully qualified name here
+#  SDPort = 8103
+#  Password = "ccV3lVTsQRsdIUGyab0N4sMDavui2hOBkmpBU0aQKOr9"          # password for Storage daemon
+#  Device = SDT-10000                  # must be same as Device in Storage daemon
+#  Media Type = DDS-4                  # must be same as MediaType in Storage daemon
+#}
+
+# Definition of 8mm tape storage device
+#Storage {
+#  Name = "8mmDrive"
+#  Address = @hostname@                # N.B. Use a fully qualified name here
+#  SDPort = 8103
+#  Password = "ccV3lVTsQRsdIUGyab0N4sMDavui2hOBkmpBU0aQKOr9"
+#  Device = "Exabyte 8mm"
+#  MediaType = "8mm"
+#}
+
+
+# Generic catalog service
+Catalog {
+  Name = MyCatalog
+  dbname = regress; user = regress; password = ""
+}
+
+# Reasonable message delivery -- send most everything to email address
+#  and to the console
+Messages {
+  Name = Standard
+  mailcommand = "@sbindir@/bsmtp -h localhost -f \"\(Bacula regression\) %r\" -s \"Regression: %t %e of %c %l\" %r"
+  operatorcommand = "@sbindir@/bsmtp -h localhost -f \"\(Bacula regression\) %r\" -s \"Regression: Intervention needed for %j\" %r"
+  MailOnError = @job_email@ = all
+  operator = @job_email@ = mount
+  console = all, !skipped, !terminate, !restored
+#
+# WARNING! the following will create a file that you must cycle from
+#          time to time as it will grow indefinitely. However, it will
+#          also keep all your messages if the scroll off the console.
+#
+  append = "@working_dir@/log" = all, !skipped
+}
+
+Messages {
+  Name = NoEmail
+  mailcommand = "@sbindir@/bsmtp -h localhost -f \"\(Bacula regression\) %r\" -s \"Regression: %t %e of %c %l\" %r"
+  console = all, !skipped, !terminate
+#
+# WARNING! the following will create a file that you must cycle from
+#          time to time as it will grow indefinitely. However, it will
+#          also keep all your messages if the scroll off the console.
+#
+  append = "@working_dir@/log" = all, !skipped
+}
+
+    
+# Default pool definition
+Pool {
+  Name = Default
+  Pool Type = Backup
+  Recycle = yes                       # Bacula can automatically recycle Volumes
+  AutoPrune = yes                     # Prune expired volumes
+  Volume Retention = 365d             # one year
+# Label Format = "TEST-${Year}-${Month:p/2/0/r}-${Day:p/2/0/r}:${NumVols}"
+}
diff --git a/regress/scripts/tls-bacula-fd.conf.in b/regress/scripts/tls-bacula-fd.conf.in
new file mode 100644
index 0000000000..6317ecc800
--- /dev/null
+++ b/regress/scripts/tls-bacula-fd.conf.in
@@ -0,0 +1,41 @@
+#
+# Default  Bacula File Daemon Configuration file
+#
+#  For Bacula release 2.0
+#
+# There is not much to change here except perhaps the
+# File daemon Name to
+#
+
+#
+# List Directors who are permitted to contact this File daemon
+#
+Director {
+  Name = @hostname@-dir
+  Password = "xevrjURYoCHhn26RaJoWbeWXEY/a3VqGKp/37tgWiuHc"
+  TLS Require = yes
+  TLS Certificate = "@scriptdir@/tls-cert.pem"
+  TLS Key = "@scriptdir@/tls-cert.pem"
+  TLS CA Certificate File = "@scriptdir@/tls-CA.pem"
+}
+
+#
+# "Global" File daemon configuration specifications
+#
+FileDaemon {                          # this is me
+  Name = @hostname@-fd
+  FDport = 8102                  # where we listen for the director
+  WorkingDirectory = "@working_dir@"
+  Pid Directory = "@piddir@"
+  SubSys Directory = "@subsysdir@"
+  TLS Require = yes
+  TLS Certificate = "@scriptdir@/tls-cert.pem"
+  TLS Key = "@scriptdir@/tls-cert.pem"
+  TLS CA Certificate File = "@scriptdir@/tls-CA.pem"
+}
+
+# Send all messages except skipped files back to Director
+Messages {
+  Name = Standard
+  director = @hostname@-dir = all, !terminate
+}
diff --git a/regress/scripts/tls-cert.pem b/regress/scripts/tls-cert.pem
new file mode 100644
index 0000000000..18c7ce6376
--- /dev/null
+++ b/regress/scripts/tls-cert.pem
@@ -0,0 +1,357 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 1 (0x1)
+        Signature Algorithm: sha1WithRSAEncryption
+        Issuer: C=US, ST=MA, L=None, O=Bacula, OU=Bacula, CN=Bacula Test CA
+        Validity
+            Not Before: Jun 22 19:47:20 2007 GMT
+            Not After : Jun 19 19:47:20 2017 GMT
+        Subject: C=US, ST=MA, L=None, O=Bacula, OU=Bacula, CN=localhost
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+            RSA Public Key: (4096 bit)
+                Modulus (4096 bit):
+                    00:a5:f2:48:4b:63:fa:be:37:59:46:14:58:82:32:
+                    fd:af:25:64:58:55:93:c8:0e:b5:45:c5:72:05:14:
+                    07:80:4d:da:d9:73:66:b1:e8:6c:f0:cf:d6:55:dd:
+                    a1:2d:2e:bb:c8:99:af:6a:99:bd:8d:cd:aa:f6:ca:
+                    b5:64:5c:58:c6:c3:c2:dc:a1:86:7c:b3:b0:ee:da:
+                    f2:a1:3a:c2:a7:1d:83:7b:d7:9a:a8:30:97:fc:c0:
+                    66:2d:0e:b9:c6:38:d9:91:ff:d9:be:5f:0d:5c:90:
+                    1c:78:82:bc:65:5b:3a:12:8d:ac:95:a5:cc:f8:f7:
+                    74:99:0b:95:1b:34:7d:7f:81:ac:75:f2:e7:af:d4:
+                    e6:29:fd:51:2f:c1:42:cc:95:ef:df:79:7b:c8:66:
+                    30:aa:c9:ba:70:38:cf:b9:68:cf:e6:45:ec:1d:8d:
+                    6b:a1:a8:f5:93:a7:fb:ae:e9:b0:f6:0f:99:46:27:
+                    aa:d5:7f:24:0f:a9:ac:85:d4:b8:e2:63:e2:dc:4f:
+                    a3:3b:86:f8:3b:61:42:de:58:03:d6:8c:06:e2:f7:
+                    18:cb:e7:c5:ce:97:88:ac:08:5b:0a:fc:54:af:6a:
+                    a6:dd:9a:94:da:85:bd:06:e9:ec:fe:73:36:9a:bf:
+                    1d:fb:6e:1b:2a:de:f7:09:33:f8:a8:3d:58:29:44:
+                    f9:a9:1c:0f:58:85:3b:fb:62:aa:be:fc:97:17:82:
+                    25:c7:5a:d4:71:d6:7f:30:3d:c8:8b:f6:f8:5f:05:
+                    c6:b6:d0:31:ac:a4:ae:47:3c:0e:4d:b4:28:6b:4b:
+                    3c:a2:01:df:37:bb:18:8c:3b:15:53:fd:d9:0a:a9:
+                    bd:12:59:9c:59:b0:c9:d9:af:1f:2f:19:cf:dd:63:
+                    42:09:83:fc:98:5c:76:68:bd:af:f5:71:b2:b7:63:
+                    34:47:ed:89:74:73:fd:e2:33:4e:e6:1d:7e:cb:27:
+                    d2:2a:94:a7:07:d1:5d:e2:b8:73:78:4a:6f:5f:9f:
+                    9c:9a:d3:fa:4f:4b:b0:19:82:0a:b9:39:62:81:ef:
+                    7d:9b:0e:ab:69:18:70:33:80:f1:91:87:ba:4a:23:
+                    ba:1b:2a:8b:d0:34:cc:11:e9:b0:d2:73:1d:12:7d:
+                    3d:a3:3e:86:3c:9c:15:7c:40:92:3f:20:b4:61:d9:
+                    39:65:a5:c9:e3:6e:de:fe:fe:0e:61:42:2f:cf:93:
+                    9e:fa:05:06:75:2e:53:11:8e:e4:1c:5f:ad:89:4d:
+                    60:e3:98:2c:c0:60:83:9d:b2:02:06:62:ff:fe:7b:
+                    de:62:9e:65:f7:e1:ab:03:36:c9:8c:b1:4f:50:6d:
+                    ab:20:78:63:f5:1e:be:db:88:b7:82:bb:34:de:da:
+                    37:23:8f
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Basic Constraints: 
+                CA:FALSE
+            Netscape Cert Type: 
+                SSL Client, SSL Server
+            Netscape Comment: 
+                TinyCA Generated Certificate
+            X509v3 Subject Key Identifier: 
+                EC:89:89:35:40:56:8B:D7:59:A6:6B:EA:FF:23:16:3A:C4:15:AA:48
+            X509v3 Authority Key Identifier: 
+                keyid:BB:31:0C:AE:8B:1A:84:53:AF:22:C7:35:31:6B:8E:0C:A0:FA:CA:96
+                DirName:/C=US/ST=MA/L=None/O=Bacula/OU=Bacula/CN=Bacula Test CA
+                serial:FB:2D:58:85:23:55:12:1A
+
+            X509v3 Issuer Alternative Name: 
+                <EMPTY>
+
+            X509v3 Subject Alternative Name: 
+                <EMPTY>
+
+    Signature Algorithm: sha1WithRSAEncryption
+        22:f3:34:b8:be:3e:d4:6b:9a:6e:86:d2:e1:bd:72:a8:51:45:
+        ed:f9:d3:1a:b7:41:81:d1:fa:e8:42:c3:a9:6c:95:7b:1f:3f:
+        e3:e8:fa:43:25:ee:38:78:52:e0:29:61:50:57:ff:89:32:b8:
+        e8:83:5d:63:ea:33:f2:7e:d5:8d:42:0d:0f:06:ae:b4:1d:77:
+        4c:44:47:17:48:ac:f9:59:0e:4b:d4:e3:28:ca:67:4e:5d:e8:
+        76:dd:a6:fc:50:43:46:76:d8:60:fb:84:98:d0:59:99:e7:29:
+        2f:c1:8f:4b:4a:32:da:e1:d8:0a:ec:39:62:1f:39:4c:99:8f:
+        74:e4:b7:b8:df:c4:0f:5c:5c:8e:3a:2c:0e:72:c2:fd:68:7c:
+        44:eb:87:fe:c1:55:2b:b6:ac:8b:f5:45:8c:07:fa:da:80:b5:
+        66:51:1c:1b:c9:54:13:45:b5:a9:15:01:c3:16:44:e5:f8:d4:
+        58:d6:e8:44:68:ba:4f:c5:fa:ac:cf:06:e0:fc:9b:5f:25:96:
+        ce:d3:1e:29:5d:97:ce:48:92:3c:e9:93:5a:6c:12:11:63:5d:
+        f0:78:08:60:06:12:c9:47:cc:77:bb:e6:13:8e:3a:ac:b0:39:
+        39:e8:79:ca:fa:14:85:1a:f3:8e:a6:02:17:fb:12:29:d6:d8:
+        e7:19:dc:35:47:c9:b9:e3:f6:00:a3:04:f9:b0:e4:83:fb:ea:
+        b5:17:cd:bc:ab:db:bf:88:aa:a7:90:ea:e4:1c:3b:bd:47:ff:
+        2d:8b:9b:36:ee:e6:a6:77:95:52:ae:95:02:84:ff:ca:57:f2:
+        c7:52:d4:68:76:46:44:6d:51:4f:5f:2e:05:d7:fc:8c:6d:8c:
+        b2:6c:aa:fc:ca:c8:6f:3c:23:b5:fa:a3:11:2b:62:1a:65:a3:
+        9d:46:ed:40:5e:e3:a8:3a:85:a8:65:62:05:8d:1c:07:47:6a:
+        51:0c:f7:cd:cc:54:6e:4e:74:e0:0b:a7:56:63:fa:8e:bf:5d:
+        95:4e:4b:c0:61:64:ee:10:82:75:69:2e:66:81:cc:e3:ec:c9:
+        aa:e2:5f:03:d6:5b:16:c6:66:20:a4:90:6a:4b:49:04:c3:ec:
+        53:03:18:51:17:d7:48:b5:f9:db:8e:1a:e7:7b:7f:0e:83:79:
+        5c:36:76:0d:04:54:a7:f2:e9:8f:2e:51:de:79:81:aa:3b:e4:
+        48:00:65:33:cf:af:ce:dd:63:81:fa:63:cf:79:0c:6b:45:a3:
+        21:0e:ee:4a:ed:27:a8:6a:21:3f:b1:6f:e1:f0:ae:81:6c:dc:
+        38:53:9f:2c:b7:d1:65:86:0a:5d:7b:14:38:6c:e2:89:2d:5d:
+        22:05:91:41:89:0e:bd:2c
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+Private-Key: (4096 bit)
+modulus:
+    00:a5:f2:48:4b:63:fa:be:37:59:46:14:58:82:32:
+    fd:af:25:64:58:55:93:c8:0e:b5:45:c5:72:05:14:
+    07:80:4d:da:d9:73:66:b1:e8:6c:f0:cf:d6:55:dd:
+    a1:2d:2e:bb:c8:99:af:6a:99:bd:8d:cd:aa:f6:ca:
+    b5:64:5c:58:c6:c3:c2:dc:a1:86:7c:b3:b0:ee:da:
+    f2:a1:3a:c2:a7:1d:83:7b:d7:9a:a8:30:97:fc:c0:
+    66:2d:0e:b9:c6:38:d9:91:ff:d9:be:5f:0d:5c:90:
+    1c:78:82:bc:65:5b:3a:12:8d:ac:95:a5:cc:f8:f7:
+    74:99:0b:95:1b:34:7d:7f:81:ac:75:f2:e7:af:d4:
+    e6:29:fd:51:2f:c1:42:cc:95:ef:df:79:7b:c8:66:
+    30:aa:c9:ba:70:38:cf:b9:68:cf:e6:45:ec:1d:8d:
+    6b:a1:a8:f5:93:a7:fb:ae:e9:b0:f6:0f:99:46:27:
+    aa:d5:7f:24:0f:a9:ac:85:d4:b8:e2:63:e2:dc:4f:
+    a3:3b:86:f8:3b:61:42:de:58:03:d6:8c:06:e2:f7:
+    18:cb:e7:c5:ce:97:88:ac:08:5b:0a:fc:54:af:6a:
+    a6:dd:9a:94:da:85:bd:06:e9:ec:fe:73:36:9a:bf:
+    1d:fb:6e:1b:2a:de:f7:09:33:f8:a8:3d:58:29:44:
+    f9:a9:1c:0f:58:85:3b:fb:62:aa:be:fc:97:17:82:
+    25:c7:5a:d4:71:d6:7f:30:3d:c8:8b:f6:f8:5f:05:
+    c6:b6:d0:31:ac:a4:ae:47:3c:0e:4d:b4:28:6b:4b:
+    3c:a2:01:df:37:bb:18:8c:3b:15:53:fd:d9:0a:a9:
+    bd:12:59:9c:59:b0:c9:d9:af:1f:2f:19:cf:dd:63:
+    42:09:83:fc:98:5c:76:68:bd:af:f5:71:b2:b7:63:
+    34:47:ed:89:74:73:fd:e2:33:4e:e6:1d:7e:cb:27:
+    d2:2a:94:a7:07:d1:5d:e2:b8:73:78:4a:6f:5f:9f:
+    9c:9a:d3:fa:4f:4b:b0:19:82:0a:b9:39:62:81:ef:
+    7d:9b:0e:ab:69:18:70:33:80:f1:91:87:ba:4a:23:
+    ba:1b:2a:8b:d0:34:cc:11:e9:b0:d2:73:1d:12:7d:
+    3d:a3:3e:86:3c:9c:15:7c:40:92:3f:20:b4:61:d9:
+    39:65:a5:c9:e3:6e:de:fe:fe:0e:61:42:2f:cf:93:
+    9e:fa:05:06:75:2e:53:11:8e:e4:1c:5f:ad:89:4d:
+    60:e3:98:2c:c0:60:83:9d:b2:02:06:62:ff:fe:7b:
+    de:62:9e:65:f7:e1:ab:03:36:c9:8c:b1:4f:50:6d:
+    ab:20:78:63:f5:1e:be:db:88:b7:82:bb:34:de:da:
+    37:23:8f
+publicExponent: 65537 (0x10001)
+privateExponent:
+    21:ff:a0:86:29:a6:ae:a0:02:5f:54:3d:c9:f7:0e:
+    78:7a:cd:b3:37:5d:3e:a8:9c:c4:fd:ad:dd:92:7b:
+    f2:f2:80:7a:fa:a4:b8:a0:68:e9:71:7b:75:3e:22:
+    0e:72:bb:b0:5e:a4:4c:cf:d0:c1:23:b8:fa:35:0f:
+    b2:cf:24:b5:1c:58:69:01:82:df:3b:a5:6d:5a:58:
+    49:66:13:89:4f:87:a7:b0:c5:93:dd:d8:d5:c4:c9:
+    6a:43:d1:15:e6:81:d4:e2:b9:46:c2:8c:a7:41:33:
+    44:11:6c:ed:cb:21:fb:b9:20:f9:cb:ed:51:b8:c9:
+    1f:ad:fa:cf:87:12:8b:34:13:14:5b:3e:d2:8c:68:
+    d7:83:79:c5:b1:ef:b0:a0:ab:73:7a:9d:3c:b2:8b:
+    18:02:9a:7a:f1:78:c5:80:ce:cf:5b:d6:03:3b:fd:
+    28:32:c8:95:86:de:0e:b8:fc:33:7d:80:a6:99:eb:
+    eb:2f:d0:40:91:3f:b2:6f:a1:ad:68:4f:8b:59:99:
+    94:d1:93:3b:ff:32:47:01:7b:4f:d2:82:7a:af:ab:
+    59:e3:53:68:7f:2d:56:29:a4:15:7d:1b:10:91:66:
+    3c:92:b6:1a:8b:39:ee:17:b1:21:74:93:64:62:f1:
+    8e:98:c1:62:28:2a:2e:ad:82:2d:5d:dc:19:20:73:
+    91:b8:97:f4:d2:4f:43:bb:6c:19:ef:2b:f9:21:27:
+    1d:3f:c8:93:35:84:1c:43:fb:c2:2f:3b:67:ea:71:
+    84:a5:f5:12:9e:e0:fd:2f:c4:5f:6c:51:07:15:77:
+    92:1d:89:77:2b:8c:44:20:d5:cb:22:d9:c2:09:02:
+    80:44:0f:c1:74:f2:6e:a8:0f:09:30:78:03:f5:87:
+    04:93:c1:64:81:ef:c6:78:39:64:de:06:fb:55:d9:
+    a0:b8:29:bb:09:19:cc:56:45:18:b6:d2:38:9b:9e:
+    d6:da:eb:1c:9e:5a:e2:92:d8:ae:da:32:0f:71:21:
+    38:af:a6:c7:d4:44:69:af:3d:b9:1e:64:c1:55:eb:
+    fb:ed:4c:37:0e:ff:4b:75:36:cd:66:23:e8:6a:11:
+    20:02:15:30:c4:cd:46:3d:ec:95:e3:6c:a8:ee:ac:
+    74:e3:11:18:6d:2f:d9:b1:81:a1:5f:69:e2:af:92:
+    cc:80:ea:a2:41:35:3b:d4:1c:c6:5c:77:3e:ff:51:
+    8b:17:9b:65:25:22:a2:0a:12:4e:fc:b3:b6:67:1b:
+    28:88:e5:33:f7:f5:b4:36:a1:46:1e:b7:e4:c4:88:
+    2f:e8:ba:17:9b:06:59:bd:51:e2:4c:06:40:ea:09:
+    0e:6b:8a:bb:bc:60:ca:70:05:ea:db:e5:30:7e:3d:
+    92:91
+prime1:
+    00:d5:26:49:52:d4:04:b6:43:66:da:7e:e1:16:a5:
+    01:7b:38:18:08:ac:fe:ac:07:50:06:33:66:19:a3:
+    90:47:d6:84:09:ab:f2:e3:00:45:40:d5:31:ab:17:
+    cc:52:28:71:f9:12:53:f2:42:03:cc:6b:e6:32:fe:
+    37:7c:0d:36:d9:e3:90:5c:0d:43:67:01:4d:fd:c1:
+    66:29:17:e9:b0:a3:d6:09:b7:5f:c1:14:7e:44:8f:
+    9d:c0:04:a3:f9:db:25:e4:41:f6:64:31:5b:29:f9:
+    16:bc:ec:72:b3:0b:36:28:fe:53:26:71:6d:16:f1:
+    81:86:2a:b5:a1:64:05:b4:9e:d4:20:71:81:df:26:
+    de:79:d6:96:a6:9d:ed:99:cc:a6:25:c0:18:ed:74:
+    f7:14:0b:93:4f:d8:99:0b:26:10:e2:f2:85:71:1d:
+    89:2d:b3:70:ad:48:4e:a3:92:f6:5c:a3:c0:ed:4b:
+    c7:67:15:8a:fd:80:36:9e:ef:14:be:90:6f:a9:b8:
+    34:11:1e:60:50:3c:aa:be:3d:84:a5:0b:86:51:d8:
+    85:e3:e0:f8:52:4a:bf:2d:f5:c3:01:d7:a4:5e:0d:
+    7b:9b:3b:e7:71:b3:12:76:bc:4e:20:75:7d:74:83:
+    2d:56:8a:aa:5c:d1:5c:8f:3d:61:52:8c:a6:99:f9:
+    9c:97
+prime2:
+    00:c7:4e:b1:4f:7f:d0:7d:77:5a:5b:d4:10:92:47:
+    5b:7c:9f:84:12:5b:82:f5:e8:8b:8f:80:8f:7d:6e:
+    75:af:94:8e:35:9f:8c:06:81:d6:2d:e0:be:ad:9c:
+    71:ae:ce:88:cd:af:35:62:6e:c2:67:d2:e6:72:46:
+    1a:b4:fc:73:74:d8:4c:ab:b6:c7:ba:f1:b5:b5:7c:
+    2c:b6:16:3a:e0:70:82:31:1a:ac:50:34:30:99:b2:
+    3f:7c:f5:60:68:f5:d8:81:96:1d:f5:ea:2b:df:1f:
+    bf:0f:7f:69:07:60:7a:b0:4d:b4:01:41:5a:53:6c:
+    5b:1f:56:8a:69:55:a1:5f:e1:11:6c:7d:c5:27:e5:
+    fb:9b:bf:e6:58:74:ef:9e:89:23:57:bb:a5:1d:74:
+    71:43:6a:b2:30:5b:44:56:a9:57:75:d8:37:87:9b:
+    de:35:16:60:5b:51:f9:bf:2d:2d:b5:d6:35:52:b4:
+    3f:34:bf:d6:cb:f1:9c:17:f4:ca:a6:8f:1f:1d:ce:
+    db:48:e9:b0:13:00:03:c5:c1:e4:e8:82:f3:77:5b:
+    25:ef:5e:20:28:1e:be:d2:57:c9:e4:06:dc:dd:07:
+    c9:01:07:65:51:37:3e:86:e6:1b:ec:ae:7c:f5:f4:
+    19:b5:e4:d2:5a:6d:56:62:ec:b8:43:58:0a:1f:37:
+    77:c9
+exponent1:
+    7d:0b:13:f2:ea:7c:c5:2c:2f:77:b8:fd:75:9a:61:
+    8f:16:ee:4a:90:aa:6a:e3:73:57:df:e9:62:db:28:
+    b6:6c:2b:53:bd:33:25:66:b0:3a:03:98:3a:c6:20:
+    50:86:77:ae:65:c9:27:93:00:c5:78:fb:38:29:19:
+    05:c6:7e:ca:3e:8d:1e:e3:8d:0a:2d:a2:c2:5e:25:
+    ff:af:8e:a1:d8:cb:a5:31:95:94:20:e0:9e:7a:1e:
+    52:5a:a6:93:da:b3:94:ff:f9:7a:f7:d5:82:7f:25:
+    8e:b9:ab:e4:4b:8c:7f:6a:0b:ff:be:84:ff:f3:b8:
+    47:ac:60:97:88:a5:2c:3c:0d:37:e7:3f:08:59:b6:
+    24:85:f6:25:52:fa:e3:c2:42:2a:5d:52:82:63:9e:
+    db:7c:9a:f4:39:9e:37:03:22:de:f0:e5:c5:e1:4c:
+    eb:a9:9c:4d:9b:e0:be:67:65:ee:1d:06:fe:6e:f9:
+    51:09:3b:5b:d2:4e:b8:d8:8b:33:ec:6a:05:88:11:
+    cb:85:25:7d:8c:c9:a2:07:56:fc:b8:11:19:8c:cb:
+    a7:4f:00:7e:ce:68:ef:9e:80:c3:60:ed:85:5b:a5:
+    8b:01:0e:9b:0e:31:a3:c4:7e:94:de:38:36:15:0a:
+    90:fd:92:4a:17:6c:94:7f:ae:cb:8d:c5:e3:08:a3:
+    8b
+exponent2:
+    02:a4:8b:7b:57:61:87:58:5e:cd:5a:e9:81:57:0a:
+    e2:83:26:f8:2b:58:78:34:46:2d:77:f1:ef:22:d8:
+    d2:a4:30:a2:8b:64:0a:ee:0b:cd:fd:ed:e9:55:6a:
+    b8:7b:aa:9a:b7:99:08:9e:19:5b:d1:13:17:2e:d0:
+    c9:d7:93:1c:58:85:e3:bc:ff:b6:fd:df:7f:f1:8e:
+    92:37:87:3e:54:9f:95:51:1a:39:d2:07:56:f2:63:
+    1f:20:0d:d0:36:7a:51:75:91:1e:22:a5:c4:46:a2:
+    7c:ed:1e:92:67:78:19:00:5e:c3:a9:7f:2e:1e:00:
+    b3:50:ad:73:2a:1c:82:ad:f4:52:30:f4:bd:4b:b2:
+    63:65:4f:03:9b:41:56:23:d1:61:27:6e:d0:0e:2c:
+    36:4d:a2:e1:3b:44:93:b5:99:20:49:e6:aa:98:a9:
+    80:a0:b4:54:61:a8:e3:1d:11:3f:19:01:0a:00:b3:
+    d9:da:35:59:ec:f1:39:ec:18:07:cf:5c:05:44:29:
+    ea:34:97:0e:19:70:f3:5d:57:d0:b1:73:d3:00:55:
+    67:70:23:13:05:1d:58:a2:ab:5d:a7:ad:a4:0c:a7:
+    60:a9:1d:71:cf:3e:b8:01:33:1b:97:50:b6:de:2e:
+    bd:17:b4:a6:58:4e:cd:ee:ff:9e:7c:fb:5d:60:99:
+    e9
+coefficient:
+    71:03:d0:58:4f:25:8f:54:77:12:49:91:80:b4:e0:
+    ac:ae:c2:c4:8e:fb:69:64:bb:13:6e:5a:22:72:be:
+    04:dc:ab:7b:a8:79:fb:e7:60:ea:0c:6b:40:1c:50:
+    29:28:32:8f:e8:d5:fb:27:9b:c3:77:ba:2b:39:02:
+    1a:a1:7a:d1:2d:4e:ab:76:4f:52:63:79:ba:43:64:
+    61:7d:25:2a:33:1e:58:25:cc:79:35:8b:6a:84:d4:
+    09:6d:d3:1e:73:79:54:23:14:72:1f:12:d8:c5:e2:
+    2b:88:0a:28:f0:73:8c:b3:05:25:c4:04:fc:75:ee:
+    8c:59:11:4d:33:02:d5:45:e2:17:d0:bb:20:78:fe:
+    a0:db:90:87:f8:f4:50:be:05:16:0a:6c:a8:85:21:
+    b9:3d:d6:a9:2c:2e:dd:91:c6:83:c6:b6:76:c8:e0:
+    30:59:fe:a7:c8:76:e9:fa:dc:5e:4c:4e:db:ed:c6:
+    f3:13:f5:60:d9:86:62:69:e7:77:86:e7:59:d2:c5:
+    1d:79:bd:a8:55:a3:69:22:ac:61:dd:ae:0e:f5:80:
+    e1:79:2d:a8:90:81:35:65:2f:e9:50:70:6d:92:fc:
+    58:fa:82:3f:67:16:0d:d5:15:ea:22:d1:8a:1f:28:
+    64:cb:fd:9d:f1:fb:2e:3c:10:06:bf:a3:9e:7f:c5:
+    b6
+-----BEGIN RSA PRIVATE KEY-----
+MIIJJwIBAAKCAgEApfJIS2P6vjdZRhRYgjL9ryVkWFWTyA61RcVyBRQHgE3a2XNm
+sehs8M/WVd2hLS67yJmvapm9jc2q9sq1ZFxYxsPC3KGGfLOw7tryoTrCpx2De9ea
+qDCX/MBmLQ65xjjZkf/Zvl8NXJAceIK8ZVs6Eo2slaXM+Pd0mQuVGzR9f4GsdfLn
+r9TmKf1RL8FCzJXv33l7yGYwqsm6cDjPuWjP5kXsHY1roaj1k6f7rumw9g+ZRieq
+1X8kD6mshdS44mPi3E+jO4b4O2FC3lgD1owG4vcYy+fFzpeIrAhbCvxUr2qm3ZqU
+2oW9Buns/nM2mr8d+24bKt73CTP4qD1YKUT5qRwPWIU7+2KqvvyXF4Ilx1rUcdZ/
+MD3Ii/b4XwXGttAxrKSuRzwOTbQoa0s8ogHfN7sYjDsVU/3ZCqm9ElmcWbDJ2a8f
+LxnP3WNCCYP8mFx2aL2v9XGyt2M0R+2JdHP94jNO5h1+yyfSKpSnB9Fd4rhzeEpv
+X5+cmtP6T0uwGYIKuTlige99mw6raRhwM4DxkYe6SiO6GyqL0DTMEemw0nMdEn09
+oz6GPJwVfECSPyC0Ydk5ZaXJ427e/v4OYUIvz5Oe+gUGdS5TEY7kHF+tiU1g45gs
+wGCDnbICBmL//nveYp5l9+GrAzbJjLFPUG2rIHhj9R6+24i3grs03to3I48CAwEA
+AQKCAgAh/6CGKaauoAJfVD3J9w54es2zN10+qJzE/a3dknvy8oB6+qS4oGjpcXt1
+PiIOcruwXqRMz9DBI7j6NQ+yzyS1HFhpAYLfO6VtWlhJZhOJT4ensMWT3djVxMlq
+Q9EV5oHU4rlGwoynQTNEEWztyyH7uSD5y+1RuMkfrfrPhxKLNBMUWz7SjGjXg3nF
+se+woKtzep08sosYApp68XjFgM7PW9YDO/0oMsiVht4OuPwzfYCmmevrL9BAkT+y
+b6GtaE+LWZmU0ZM7/zJHAXtP0oJ6r6tZ41Nofy1WKaQVfRsQkWY8krYaiznuF7Eh
+dJNkYvGOmMFiKCourYItXdwZIHORuJf00k9Du2wZ7yv5IScdP8iTNYQcQ/vCLztn
+6nGEpfUSnuD9L8RfbFEHFXeSHYl3K4xEINXLItnCCQKARA/BdPJuqA8JMHgD9YcE
+k8Fkge/GeDlk3gb7VdmguCm7CRnMVkUYttI4m57W2uscnlriktiu2jIPcSE4r6bH
+1ERprz25HmTBVev77Uw3Dv9LdTbNZiPoahEgAhUwxM1GPeyV42yo7qx04xEYbS/Z
+sYGhX2nir5LMgOqiQTU71BzGXHc+/1GLF5tlJSKiChJO/LO2ZxsoiOUz9/W0NqFG
+HrfkxIgv6LoXmwZZvVHiTAZA6gkOa4q7vGDKcAXq2+Uwfj2SkQKCAQEA1SZJUtQE
+tkNm2n7hFqUBezgYCKz+rAdQBjNmGaOQR9aECavy4wBFQNUxqxfMUihx+RJT8kID
+zGvmMv43fA022eOQXA1DZwFN/cFmKRfpsKPWCbdfwRR+RI+dwASj+dsl5EH2ZDFb
+KfkWvOxysws2KP5TJnFtFvGBhiq1oWQFtJ7UIHGB3ybeedaWpp3tmcymJcAY7XT3
+FAuTT9iZCyYQ4vKFcR2JLbNwrUhOo5L2XKPA7UvHZxWK/YA2nu8UvpBvqbg0ER5g
+UDyqvj2EpQuGUdiF4+D4Ukq/LfXDAdekXg17mzvncbMSdrxOIHV9dIMtVoqqXNFc
+jz1hUoymmfmclwKCAQEAx06xT3/QfXdaW9QQkkdbfJ+EEluC9eiLj4CPfW51r5SO
+NZ+MBoHWLeC+rZxxrs6Iza81Ym7CZ9LmckYatPxzdNhMq7bHuvG1tXwsthY64HCC
+MRqsUDQwmbI/fPVgaPXYgZYd9eor3x+/D39pB2B6sE20AUFaU2xbH1aKaVWhX+ER
+bH3FJ+X7m7/mWHTvnokjV7ulHXRxQ2qyMFtEVqlXddg3h5veNRZgW1H5vy0ttdY1
+UrQ/NL/Wy/GcF/TKpo8fHc7bSOmwEwADxcHk6ILzd1sl714gKB6+0lfJ5Abc3QfJ
+AQdlUTc+huYb7K589fQZteTSWm1WYuy4Q1gKHzd3yQKCAQB9CxPy6nzFLC93uP11
+mmGPFu5KkKpq43NX3+li2yi2bCtTvTMlZrA6A5g6xiBQhneuZcknkwDFePs4KRkF
+xn7KPo0e440KLaLCXiX/r46h2MulMZWUIOCeeh5SWqaT2rOU//l699WCfyWOuavk
+S4x/agv/voT/87hHrGCXiKUsPA035z8IWbYkhfYlUvrjwkIqXVKCY57bfJr0OZ43
+AyLe8OXF4UzrqZxNm+C+Z2XuHQb+bvlRCTtb0k642Isz7GoFiBHLhSV9jMmiB1b8
+uBEZjMunTwB+zmjvnoDDYO2FW6WLAQ6bDjGjxH6U3jg2FQqQ/ZJKF2yUf67LjcXj
+CKOLAoIBAAKki3tXYYdYXs1a6YFXCuKDJvgrWHg0Ri138e8i2NKkMKKLZAruC839
+7elVarh7qpq3mQieGVvRExcu0MnXkxxYheO8/7b933/xjpI3hz5Un5VRGjnSB1by
+Yx8gDdA2elF1kR4ipcRGonztHpJneBkAXsOpfy4eALNQrXMqHIKt9FIw9L1LsmNl
+TwObQVYj0WEnbtAOLDZNouE7RJO1mSBJ5qqYqYCgtFRhqOMdET8ZAQoAs9naNVns
+8TnsGAfPXAVEKeo0lw4ZcPNdV9Cxc9MAVWdwIxMFHViiq12nraQMp2CpHXHPPrgB
+MxuXULbeLr0XtKZYTs3u/558+11gmekCggEAcQPQWE8lj1R3EkmRgLTgrK7CxI77
+aWS7E25aInK+BNyre6h5++dg6gxrQBxQKSgyj+jV+yebw3e6KzkCGqF60S1Oq3ZP
+UmN5ukNkYX0lKjMeWCXMeTWLaoTUCW3THnN5VCMUch8S2MXiK4gKKPBzjLMFJcQE
+/HXujFkRTTMC1UXiF9C7IHj+oNuQh/j0UL4FFgpsqIUhuT3WqSwu3ZHGg8a2dsjg
+MFn+p8h26frcXkxO2+3G8xP1YNmGYmnnd4bnWdLFHXm9qFWjaSKsYd2uDvWA4Xkt
+qJCBNWUv6VBwbZL8WPqCP2cWDdUV6iLRih8oZMv9nfH7LjwQBr+jnn/Ftg==
+-----END RSA PRIVATE KEY-----
diff --git a/regress/tests/tls-test b/regress/tests/tls-test
new file mode 100755
index 0000000000..5abc1179e6
--- /dev/null
+++ b/regress/tests/tls-test
@@ -0,0 +1,49 @@
+#!/bin/sh
+#
+# Run a simple backup of the Bacula build directory with TLS
+#   communications code enabled then restore it.
+#
+TestName="tls-test"
+JobName=tls
+. scripts/functions
+
+scripts/cleanup
+scripts/copy-tls-confs
+echo "${cwd}/build" >/tmp/file-list
+
+change_jobname CompressedTest $JobName
+start_test
+      
+cat <<END_OF_DATA >tmp/bconcmds
+@output
+messages
+@$out tmp/log1.out
+status all
+status all
+messages
+label storage=File volume=TestVolume001 pool=Default
+run job=$JobName storage=File yes
+wait
+messages
+@# 
+@# now do a restore
+@#
+@$out tmp/log2.out
+restore where=${cwd}/tmp/bacula-restores select storage=File
+unmark *
+mark *
+done
+yes
+wait
+messages
+@output
+quit
+END_OF_DATA
+
+run_bacula
+check_for_zombie_jobs storage=File
+stop_bacula
+
+check_two_logs
+check_restore_diff
+end_test
-- 
2.39.5