From owner-freebsd-questions@FreeBSD.ORG Tue Feb 6 19:04:48 2007 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 1D35A16A409 for ; Tue, 6 Feb 2007 19:04:48 +0000 (UTC) (envelope-from dghatikachalam@gmail.com) Received: from ug-out-1314.google.com (ug-out-1314.google.com [66.249.92.173]) by mx1.freebsd.org (Postfix) with ESMTP id 177D813C4B6 for ; Tue, 6 Feb 2007 19:04:46 +0000 (UTC) (envelope-from dghatikachalam@gmail.com) Received: by ug-out-1314.google.com with SMTP id o2so1611983uge for ; Tue, 06 Feb 2007 11:04:45 -0800 (PST) DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:references; b=PDDXGzVGHSrLRorMy1URetL0XRSJsu3BqgSSEbnWL8t1aKSz8swToAsagGKBhn3GMJ3oYB2i6yT1GHSlbXbHzKBUJ3yQx+61LfW+27dtmhMjrXE4YMmZjmzSiWLu7P1EOGc/6o5PcO0zRwTRZJuKW894jgg5G+gHHNmjPw9sbNk= Received: by 10.78.204.20 with SMTP id b20mr1865710hug.1170788685161; Tue, 06 Feb 2007 11:04:45 -0800 (PST) Received: by 10.78.188.15 with HTTP; Tue, 6 Feb 2007 11:04:45 -0800 (PST) Message-ID: Date: Tue, 6 Feb 2007 14:04:45 -0500 From: "Dak Ghatikachalam" To: "Mike Tancsa" In-Reply-To: MIME-Version: 1.0 References: <20070205180250.b665f278.wmoran@collaborativefusion.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Cc: freebsd-questions@freebsd.org Subject: Re: Question:encryption tool X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 06 Feb 2007 19:04:48 -0000 On 2/5/07, Mike Tancsa wrote: > > On Mon, 5 Feb 2007 18:21:18 -0500, in sentex.lists.freebsd.questions > you wrote: > > > >Thanks a lot, Our current backup system is veritas netbackup, and > changing > >that to entire bacula is best thing for me, > > > >But the making the decision about switching to bacula was above my pay > >grade. I hardly see that happen anytime soon. > > > >so they wanted me encrypt these files, that is on the backup location > >before the netbackup scheduler picks up these files. > > If you just want to encrypt the files with a password, openssl works > well and can be found pretty well on any platform. > > [cage]% echo "this is a test" | openssl enc -aes-128-cbc -base64 -k > pass > U2FsdGVkX1+gkWRJo5W7PGBLpilZmlEx3+cKML+32to= > [cage]% > [cage]% > [cage]% echo "U2FsdGVkX1+gkWRJo5W7PGBLpilZmlEx3+cKML+32to=" | openssl > aes-128-cbc -d -base64 -k pass > this is a test > [cage]% > > But you really want to take a look at /usr/ports/security/gnupg. It > seems all a bit confusing at first, but its a much better way to > encrypt data and manage who has access to decode files without having > to use a common passphrase. > > It as well will work across multiple platforms > > Thanks a lot Mike