[Dar-support] Creating encrypted backups

[T o n g]

Hi,

I've successfully created encrypted full backups. However, the
problem is for the differential backups. I use:

dar -K ... -R /home/tong/ -c /export.img/dar-backup/tong_2010-05-18-diff
-A /export.img/dar-backup/tong_2010-05-00-full

but get:

The archive tong_2010-05-00-full is encrypted and no
encryption cipher has been given, cannot open archive.

I think I need to pass -J as well. However, I've already supplied
keys. This error doesn't make sense to me.

Denis, can we eliminate -J, and use *just* -K instead? because,

- Separation J & -K has already complicated my script,
- and now for differential encrypted backups the same key as to issued
twice

Let's make it simple and just use -K for encryption key, OK?

Thanks

[T o n g]

I think I need to pass -J as well. . .

Yes.

Let's make it simple and just use -K for encryption key, OK?

Please disregard the request.
I *knew* it is a trivial price to pay for a good flexibility.

[Denis Corbin]

Post by T o n g

I think I need to pass -J as well. . .

Yes.

Let's make it simple and just use -K for encryption key, OK?

That's not that simple! Suppose you want to make a differential backup
from an cyphered backup, but do not want to use the same key for the new
backup. How would you do this without two options (-K and -J here)?

Suppose you want to extract the catalogue of an encrypted archive but to
not want this isolated catalogue to be encrypted. How would you tell
that to dar if you only have one options.

Post by T o n g
Please disregard the request.
I *knew* it is a trivial price to pay for a good flexibility.

- -K is the way to tell dar how to cypher the archive object of the
operation
- -J is the way to tell dar how is cyphered the archive of reference.
- -$ is the way to tell dar how is cyphered the auxilliary archive of
reference (when merging two archives into a new one).

all theses three option by their absence mean no cyphering at all, but
you may well need all tree at the same time to provide three different
keys, the first for the archive of reference, the second for the
auxilliary archive of reference and the third to tell dar which key/algo
to use to cypher resulting merging archive.

That's my idea of a "good flexibility".