Skip to content

Commit

Permalink
Added common name for "TLS-PSK"
Browse files Browse the repository at this point in the history
  • Loading branch information
astoorangi committed Jun 27, 2019
1 parent f259cc6 commit 22c2c45
Show file tree
Hide file tree
Showing 2 changed files with 4 additions and 3 deletions.
Expand Up @@ -81,5 +81,6 @@ Products
|postgresql|, ``|postgresql|``
reST, reST
|sqlite|, ``|sqlite|``
TLS-PSK, TLS-PSK
|vmware|, ``|vmware|``
|vsphere|, ``|vsphere|``
6 changes: 3 additions & 3 deletions docs/manuals/source/TasksAndConcepts/TransportEncryption.rst
Expand Up @@ -11,7 +11,7 @@ Transport Encryption

Bareos uses TLS (Transport Layer Security) to provide secure network transport. For data encryption in contrast, please see the :ref:`DataEncryption` chapter. The initial Bacula encryption implementation has been written by Landon Fuller.

With :sinceVersion:`18.2:""` the TLS code has been enhanced by the TLS PSK (Pre Shared Keys) feature which allows the daemons to setup an encrypted connection directly without using certificates. The library used for TLS is openSSL.
With :sinceVersion:`18.2:""` the TLS code has been enhanced by the TLS-PSK (Pre Shared Keys) feature which allows the daemons to setup an encrypted connection directly without using certificates. The library used for TLS is openSSL.

.. _TlsDirectives:

Expand Down Expand Up @@ -224,7 +224,7 @@ Compatibility with |bareosFD|
|bareosFD| connection handshake probing
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

As from Bareos 18.2 all components by default establish a secure connection with encryption first, followed by the proprietary Bareos protocol. This is accomplished using TLS PSK. Older components of Bareos than version 18.2 start a connection with a cleartext handshake without encryption.
As from Bareos 18.2 all components by default establish a secure connection with encryption first, followed by the proprietary Bareos protocol. This is accomplished using TLS-PSK. Older components of Bareos than version 18.2 start a connection with a cleartext handshake without encryption.

For downward compatibility Bareos Director Daemons and Bareos Storage Daemons are able to connect to Bareos File Daemons older than version 18.2. In this case Director and Storage switch to the old protocol.

Expand Down Expand Up @@ -304,7 +304,7 @@ The following sequence is used to figure out the right protocol version and to s

|bareosFD| :sinceVersion:`18.2:""` can be used on a Bareos system before Bareos-18.2.

The *older* |bareosDir| and |bareosSD| connect to |bareosFD| using the cleartext Bareos handshake before they can switch to TLS. If you want transport encryption then only TLS with certificates can be used. TLS PSK is not possible with |bareosDir| and |bareosSd| before Bareos-18.2.
The *older* |bareosDir| and |bareosSD| connect to |bareosFD| using the cleartext Bareos handshake before they can switch to TLS. If you want transport encryption then only TLS with certificates can be used. TLS-PSK is not possible with |bareosDir| and |bareosSd| before Bareos-18.2.

However, it is also possible to disable transport encryption and use cleartext transport using the following configuration changes:

Expand Down

0 comments on commit 22c2c45

Please sign in to comment.