systemtests: add backup-bareos-encrypt-signature-test

This test encrypts and signs the backup data during backup. On restore, the data is decrypted and the signature is verified. Also added backup-bareos-encrypt-signature-test-with-tls-cert which does the same but uses tls-cert encryption.
bareos · Jan 30, 2020 · fed50bf · fed50bf
1 parent ee457bb
commit fed50bf
Show file tree

Hide file tree

Showing 89 changed files with 1,581 additions and 0 deletions.
diff --git a/systemtests/CMakeLists.txt b/systemtests/CMakeLists.txt
@@ -214,6 +214,36 @@ macro(handle_python_plugin_modules test_name)
 
 endmacro()
 
+# set the data encryption and signature keys
+set(pki_keypair
+  ${CMAKE_CURRENT_SOURCE_DIR}/pki/fd.pem)
+set(pki_master_key
+  ${CMAKE_CURRENT_SOURCE_DIR}/pki/master.cert)
+
+# set the tls ca keys
+set(tls_ca_certificate
+  ${CMAKE_CURRENT_SOURCE_DIR}/tls/bareos-ca.pem)
+
+set(tls_fd_certificate
+  ${CMAKE_CURRENT_SOURCE_DIR}/tls/client1.bareos.org-cert.pem)
+set(tls_fd_key
+  ${CMAKE_CURRENT_SOURCE_DIR}/tls/client1.bareos.org-key.pem)
+
+set(tls_sd_certificate
+  ${CMAKE_CURRENT_SOURCE_DIR}/tls/bareos-sd1.bareos.org-cert.pem)
+set(tls_sd_key
+  ${CMAKE_CURRENT_SOURCE_DIR}/tls/bareos-sd1.bareos.org-key.pem)
+
+set(tls_dir_certificate
+  ${CMAKE_CURRENT_SOURCE_DIR}/tls/bareos-dir.bareos.org-cert.pem)
+set(tls_dir_key
+  ${CMAKE_CURRENT_SOURCE_DIR}/tls/bareos-dir.bareos.org-key.pem)
+
+set(tls_con_certificate
+  ${CMAKE_CURRENT_SOURCE_DIR}/tls/console.bareos.org-cert.pem)
+set(tls_con_key
+  ${CMAKE_CURRENT_SOURCE_DIR}/tls/console.bareos.org-key.pem)
+
 macro(link_binaries_to_test_to_current_sbin_dir_with_individual_filename)
   foreach(binary_name ${ALL_BINARIES_BEING_USED_BY_SYSTEMTESTS})
     create_variable_binary_name_to_test_for_binary_name(${binary_name})
@@ -554,6 +584,8 @@ set(tests_dir ${PROJECT_BINARY_DIR}/tests)
 set(SYSTEM_TESTS
     backup-bareos-test
     backup-bareos-passive-test
+    backup-bareos-encrypt-signature-test
+    backup-bareos-encrypt-signature-test-with-tls-cert
     multiplied-device-test
     virtualfull
     virtualfull-bscan

diff --git a/systemtests/pki/fd.cert b/systemtests/pki/fd.cert
@@ -0,0 +1,24 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/systemtests/pki/fd.key b/systemtests/pki/fd.key
@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
diff --git a/systemtests/pki/fd.pem b/systemtests/pki/fd.pem
@@ -0,0 +1,51 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/systemtests/pki/master.cert b/systemtests/pki/master.cert
@@ -0,0 +1,24 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/systemtests/pki/master.key b/systemtests/pki/master.key
@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----
+MIIEpQIBAAKCAQEAumMI+H+2MKW+tJ+2MIZS4gWpcbs//G3pz3C/2C6yKJHhKHHl
+XC1kZarevVnTUJKE0GPbf2DlPHXArkjYc9ld5CZ6VnTb8U6Zg3KrmzASQzRyZwm5
++2k/FCy8Jt6WB9OzvuEBug4zJC2T/FQDBCcSOOAu8dKgb8pELm2U6H8AQee4LY+n
+nmXdeMOFbvD8ikm2grA2DoGfmvR/wacLWN+w9rHMczSbN9sAqSm/0iWZCKpLKGkD
+pxs5E6zstQPtWEGN+kKztb5i4lOPgMHYAdN4isv4m+sAP9+Ih1INLhjAs+hly0nY
+7ef+xWqRTg8tv1SY+3FAbtzJasUSSDMJTf9KqwIDAQABAoIBAEpGFNkR64RPSEOq
+MWv82yJ+pxtPRxxMoJOtloWLdit8loELgh7NZ+irwr8qAG9nM83nPRzxe+gv9Gx/
+UuI3iJbWToINZ2gtrjcXhxL8gQqO59fvpFFvi1d6zC+hG6Ba2JIEEDAYYIDWONag
+k+Mfvr8zdwGesZhavfjSajiMA4o/Iqg5FQVeo2rdrnibBS8I8VkhlaGPtDxZSu7G
+2wUQJYGDc1wx+L4/7VJAeHqR9UMiNR69D8i+Y5yUHrk2QkyhQXiH5l1kPBXrv68N
+8cgeTShaRPHTriqyWwpffB4bX1mM27yd3axYc1cF6nEih8uy8JsuTVGqNLZAUFmg
+53tt70ECgYEA3ETNruzmNL0CgwzyW08VafHxsu2oGcWpU1GcSTe2o5Nob2Biitra
+vYPGE6IOtqpR/et5Vu29T7HiLeIb+reN5+6ugQIHoN2fELQtImTNYdv3ND9jHr22
+YV+gQaDhPZq4/EqQKyPQDKdUI+ayE/Q0PfvRies6cMJGzLxBXwHUjCkCgYEA2J8z
+8RoTAFowgi8V+zKEos5udUuxWr3AuzMNrnJzQEQG7w38FmY/ePWnUl4tFB1rPMzG
+cMtDrUifOsCp9kj+erN2GIlXitRIYOTV8jYY+aRKEda9wUtDF70PAuZsgmIxC9sM
+d56CwYq5rp5nj4St0izX5UChJZBAaZm7x72gOrMCgYEAxvChcGboOCOpvCEaV1ui
+9JAfg0Jge/5pQyZHaF2YaD6/qTA9cDngLCBy6tKIRXSpHxPpAJkyTWNU66n3KUdV
+NG//Tec+ao0fmB+TUCgI02Su7ZJ+fIpNyb5raDrclB5FCyBw+3WZ94O9W7uFhL4f
+3QeuJcm9e5AMD+fLhvqJNJkCgYEAzfw9WSPxM6GPhQufPFmidGoV8SXEBURw89Gt
+Tdf5LgBCE6nZr7cU3kHCFPoGpZz/7zXN8U3oEev/tc+lDtQEYMssHlLjUtlf5ftU
+UlkM0L5fzKzFjfuyVe1qS9ivECCtANgP9+Nb9QykWp64XWnOHBCWT6JwWhbcmU4d
+mOcBaS8CgYEAvqaLgHTvP9HI0bWVUZonRfBrBt6spKHWp1AHqEVlNuP7L18h+0v7
+p4cEJ9B1OnSKiYqtyyGyuWvhBFiV068wvcJAdK0RqcwyNTJbM2RdpLuXUaEdUXob
+K7kO9eVpyoqfoDzfgXxQh//Yot7M92HKo5ut9g6IZBsoStvWSip5Z+w=
+-----END RSA PRIVATE KEY-----
diff --git a/...os-encrypt-signature-test-with-tls-cert/etc/bareos/bareos-dir.d/catalog/MyCatalog.conf.in b/...os-encrypt-signature-test-with-tls-cert/etc/bareos/bareos-dir.d/catalog/MyCatalog.conf.in
@@ -0,0 +1,8 @@
+Catalog {
+  Name = MyCatalog
+  #dbdriver = "@DEFAULT_DB_TYPE@"
+  dbdriver = "XXX_REPLACE_WITH_DATABASE_DRIVER_XXX"
+  dbname = "@db_name@"
+  dbuser = "@db_user@"
+  dbpassword = "@db_password@"
+}
diff --git a/...eos-encrypt-signature-test-with-tls-cert/etc/bareos/bareos-dir.d/client/bareos-fd.conf.in b/...eos-encrypt-signature-test-with-tls-cert/etc/bareos/bareos-dir.d/client/bareos-fd.conf.in
@@ -0,0 +1,7 @@
+Client {
+  Name = bareos-fd
+  Description = "Client resource of the Director itself."
+  Address = localhost
+  Password = "@fd_password@"          # password for FileDaemon
+  FD PORT = @fd_port@
+}
diff --git a/...s-encrypt-signature-test-with-tls-cert/etc/bareos/bareos-dir.d/console/bareos-mon.conf.in b/...s-encrypt-signature-test-with-tls-cert/etc/bareos/bareos-dir.d/console/bareos-mon.conf.in
@@ -0,0 +1,7 @@
+Console {
+  Name = bareos-mon
+  Description = "Restricted console used by tray-monitor to get the status of the director."
+  Password = "@mon_dir_password@"
+  CommandACL = status, .status
+  JobACL = *all*
+}
diff --git a/...-encrypt-signature-test-with-tls-cert/etc/bareos/bareos-dir.d/director/bareos-dir.conf.in b/...-encrypt-signature-test-with-tls-cert/etc/bareos/bareos-dir.d/director/bareos-dir.conf.in
@@ -0,0 +1,35 @@
+Director {                            # define myself
+  Name = bareos-dir
+  QueryFile = "@scriptdir@/query.sql"
+  Maximum Concurrent Jobs = 10
+  Password = "@dir_password@"         # Console password
+  Messages = Daemon
+  Auditing = yes
+
+  # Enable the Heartbeat if you experience connection losses
+  # (eg. because of your router or firewall configuration).
+  # Additionally the Heartbeat can be enabled in bareos-sd and bareos-fd.
+  #
+  # Heartbeat Interval = 1 min
+
+  # remove comment in next line to load dynamic backends from specified directory
+  Backend Directory = @backenddir@
+
+  # remove comment from "Plugin Directory" to load plugins from specified directory.
+  # if "Plugin Names" is defined, only the specified plugins will be loaded,
+  # otherwise all director plugins (*-dir.so) from the "Plugin Directory".
+  #
+  # Plugin Directory = "@python_plugin_module_src_dir@"
+  # Plugin Names = ""
+  Working Directory =  "@working_dir@"
+  Pid Directory =  "@piddir@"
+  DirPort = @dir_port@
+
+  TLS Enable = yes
+  TLS Require = yes
+  TLS Verify Peer = no
+  TLS Certificate = "@tls_dir_certificate@"
+  TLS Key = @tls_dir_key@
+  TLS CA Certificate File = "@tls_ca_certificate@"
+
+}
diff --git a/...reos-encrypt-signature-test-with-tls-cert/etc/bareos/bareos-dir.d/fileset/Catalog.conf.in b/...reos-encrypt-signature-test-with-tls-cert/etc/bareos/bareos-dir.d/fileset/Catalog.conf.in
@@ -0,0 +1,11 @@
+FileSet {
+  Name = "Catalog"
+  Description = "Backup the catalog dump and Bareos configuration files."
+  Include {
+    Options {
+      signature = MD5
+    }
+    File = "@working_dir@/@db_name@.sql" # database dump
+    File = "@confdir@"                   # configuration
+  }
+}
diff --git a/...eos-encrypt-signature-test-with-tls-cert/etc/bareos/bareos-dir.d/fileset/SelfTest.conf.in b/...eos-encrypt-signature-test-with-tls-cert/etc/bareos/bareos-dir.d/fileset/SelfTest.conf.in
@@ -0,0 +1,11 @@
+FileSet {
+  Name = "SelfTest"
+  Description = "fileset just to backup some files for selftest"
+  Include {
+    Options {
+      Signature = MD5 # calculate md5 checksum per file
+    }
+   #File = "@sbindir@"
+    File=<@tmpdir@/file-list
+  }
+}
diff --git a/...os-encrypt-signature-test-with-tls-cert/etc/bareos/bareos-dir.d/job/BackupCatalog.conf.in b/...os-encrypt-signature-test-with-tls-cert/etc/bareos/bareos-dir.d/job/BackupCatalog.conf.in
@@ -0,0 +1,20 @@
+Job {
+  Name = "BackupCatalog"
+  Description = "Backup the catalog database (after the nightly save)"
+  JobDefs = "DefaultJob"
+  Level = Full
+  FileSet="Catalog"
+
+  # This creates an ASCII copy of the catalog
+  # Arguments to make_catalog_backup.pl are:
+  #  make_catalog_backup.pl <catalog-name>
+  RunBeforeJob = "@scriptdir@/make_catalog_backup.pl MyCatalog"
+
+  # This deletes the copy of the catalog
+  RunAfterJob  = "@scriptdir@/delete_catalog_backup"
+
+  # This sends the bootstrap via mail for disaster recovery.
+  # Should be sent to another system, please change recipient accordingly
+  Write Bootstrap = "|@bindir@/bsmtp -h @smtp_host@ -f \"\(Bareos\) \" -s \"Bootstrap for Job %j\" @job_email@" # (#01)
+  Priority = 11                   # run after main backup
+}
diff --git a/...eos-encrypt-signature-test-with-tls-cert/etc/bareos/bareos-dir.d/job/RestoreFiles.conf.in b/...eos-encrypt-signature-test-with-tls-cert/etc/bareos/bareos-dir.d/job/RestoreFiles.conf.in
@@ -0,0 +1,11 @@
+Job {
+  Name = "RestoreFiles"
+  Description = "Standard Restore template. Only one such job is needed for all standard Jobs/Clients/Storage ..."
+  Type = Restore
+  Client = bareos-fd
+  FileSet = SelfTest
+  Storage = File
+  Pool = Incremental
+  Messages = Standard
+  Where = @tmp@/bareos-restores
+}
diff --git a/...encrypt-signature-test-with-tls-cert/etc/bareos/bareos-dir.d/job/backup-bareos-fd.conf.in b/...encrypt-signature-test-with-tls-cert/etc/bareos/bareos-dir.d/job/backup-bareos-fd.conf.in
@@ -0,0 +1,5 @@
+Job {
+  Name = "backup-bareos-fd"
+  JobDefs = "DefaultJob"
+  Client = "bareos-fd"
+}
diff --git a/...s-encrypt-signature-test-with-tls-cert/etc/bareos/bareos-dir.d/jobdefs/DefaultJob.conf.in b/...s-encrypt-signature-test-with-tls-cert/etc/bareos/bareos-dir.d/jobdefs/DefaultJob.conf.in
@@ -0,0 +1,15 @@
+JobDefs {
+  Name = "DefaultJob"
+  Type = Backup
+  Level = Incremental
+  Client = bareos-fd
+  FileSet = "SelfTest"
+  Storage = File
+  Messages = Standard
+  Pool = Incremental
+  Priority = 10
+  Write Bootstrap = "@working_dir@/%c.bsr"
+  Full Backup Pool = Full                  # write Full Backups into "Full" Pool
+  Differential Backup Pool = Differential  # write Diff Backups into "Differential" Pool
+  Incremental Backup Pool = Incremental    # write Incr Backups into "Incremental" Pool
+}
diff --git a/...reos-encrypt-signature-test-with-tls-cert/etc/bareos/bareos-dir.d/messages/Daemon.conf.in b/...reos-encrypt-signature-test-with-tls-cert/etc/bareos/bareos-dir.d/messages/Daemon.conf.in
@@ -0,0 +1,7 @@
+Messages {
+  Name = Daemon
+  Description = "Message delivery for daemon messages (no job)."
+  console = all, !skipped, !saved, !audit
+  append = "@logdir@/bareos.log" = all, !skipped, !audit
+  append = "@logdir@/bareos-audit.log" = audit
+}
diff --git a/...os-encrypt-signature-test-with-tls-cert/etc/bareos/bareos-dir.d/messages/Standard.conf.in b/...os-encrypt-signature-test-with-tls-cert/etc/bareos/bareos-dir.d/messages/Standard.conf.in
@@ -0,0 +1,7 @@
+Messages {
+  Name = Standard
+  Description = "Reasonable message delivery -- send most everything to email address and to the console."
+  console = all, !skipped, !saved, !audit
+  append = "@logdir@/bareos.log" = all, !skipped, !saved, !audit
+  catalog = all, !skipped, !saved, !audit
+}
diff --git a/...areos-encrypt-signature-test-with-tls-cert/etc/bareos/bareos-dir.d/pool/Differential.conf b/...areos-encrypt-signature-test-with-tls-cert/etc/bareos/bareos-dir.d/pool/Differential.conf
@@ -0,0 +1,10 @@
+Pool {
+  Name = Differential
+  Pool Type = Backup
+  Recycle = yes                       # Bareos can automatically recycle Volumes
+  AutoPrune = yes                     # Prune expired volumes
+  Volume Retention = 90 days          # How long should the Differential Backups be kept? (#09)
+  Maximum Volume Bytes = 10G          # Limit Volume size to something reasonable
+  Maximum Volumes = 100               # Limit number of Volumes in Pool
+  Label Format = "Differential-"      # Volumes will be labeled "Differential-<volume-id>"
+}
diff --git a/...backup-bareos-encrypt-signature-test-with-tls-cert/etc/bareos/bareos-dir.d/pool/Full.conf b/...backup-bareos-encrypt-signature-test-with-tls-cert/etc/bareos/bareos-dir.d/pool/Full.conf
@@ -0,0 +1,10 @@
+Pool {
+  Name = Full
+  Pool Type = Backup
+  Recycle = yes                       # Bareos can automatically recycle Volumes
+  AutoPrune = yes                     # Prune expired volumes
+  Volume Retention = 365 days         # How long should the Full Backups be kept? (#06)
+  Maximum Volume Bytes = 50G          # Limit Volume size to something reasonable
+  Maximum Volumes = 100               # Limit number of Volumes in Pool
+  Label Format = "Full-"              # Volumes will be labeled "Full-<volume-id>"
+}
diff --git a/...bareos-encrypt-signature-test-with-tls-cert/etc/bareos/bareos-dir.d/pool/Incremental.conf b/...bareos-encrypt-signature-test-with-tls-cert/etc/bareos/bareos-dir.d/pool/Incremental.conf
@@ -0,0 +1,10 @@
+Pool {
+  Name = Incremental
+  Pool Type = Backup
+  Recycle = yes                       # Bareos can automatically recycle Volumes
+  AutoPrune = yes                     # Prune expired volumes
+  Volume Retention = 30 days          # How long should the Incremental Backups be kept?  (#12)
+  Maximum Volume Bytes = 1G           # Limit Volume size to something reasonable
+  Maximum Volumes = 100               # Limit number of Volumes in Pool
+  Label Format = "Incremental-"       # Volumes will be labeled "Incremental-<volume-id>"
+}
diff --git a/...kup-bareos-encrypt-signature-test-with-tls-cert/etc/bareos/bareos-dir.d/pool/Scratch.conf b/...kup-bareos-encrypt-signature-test-with-tls-cert/etc/bareos/bareos-dir.d/pool/Scratch.conf
@@ -0,0 +1,4 @@
+Pool {
+  Name = Scratch
+  Pool Type = Scratch
+}