Put techdocs in right place

[bacula/docs] / docs / manual / dataencryption.tex

diff --git a/docs/manual/dataencryption.tex b/docs/manual/dataencryption.tex
index d9a294af6796293f8bc60d50b9f36a31512f52c9..d181015ce93225d3d62fa5c73173ab9bc9426eeb 100644 (file)
--- a/docs/manual/dataencryption.tex
+++ b/docs/manual/dataencryption.tex
@@ -133,6 +133,18 @@ Generate  a File Daemon Key Pair for each FD:
 \end{verbatim}
 \normalsize
 
+Note, there seems to be a lot of confusion around the file extensions given
+to these keys.  For example, a .pem file can contain all the following:
+private keys (RSA and DSA), public keys (RSA and DSA) and (x509) certificates. 
+It is the default format for OpenSSL. It stores data Base64 encoded DER format,
+surrounded by ASCII headers, so is suitable for text mode transfers between
+systems. A .pem file may contain any number of keys either public or
+private. We use it in cases where there is both a public and a private
+key.
+
+Typically, above we have used the .cert extension to refer to X509
+certificate encoding that contains only a single public key.
+
 
 \section{Example Data Encryption Configuration}
 \index[general]{Example!File Daemon Configuration File}