AMCRYPT-OSSL(8) System Administration Commands AMCRYPT-OSSL(8)NAME
amcrypt-ossl - crypt program for Amanda symmetric data encryption using OpenSSL
SYNOPSIS
amcrypt-ossl [-d]
DESCRIPTION
amcrypt-ossl uses OpenSSL to encrypt and decrypt data. OpenSSL is available from www.openssl.org. OpenSSL offers a wide variety of cipher
choices ( amcrypt-ossl defaults to 256-bit AES) and can use hardware cryptographic accelerators on several platforms.
amcrypt-ossl will search for the OpenSSL program in the following directories:
/bin:/usr/bin:/usr/local/bin:/usr/ssl/bin:/usr/local/ssl/bin.
PASSPHRASE MANAGEMENT
amcrypt-ossl uses the same pass phrase to encrypt and decrypt data. It is very important to store and protect the pass phrase properly.
Encrypted backup data can only be recovered with the correct passphrase.
OpenSSL's key derivation routines use a salt to guard against dictionary attacks on the pass phrase; still it is important to pick a pass
phrase that is hard to guess. The Diceware method (see www.diceware.com) can be used to create passphrases that are difficult to guess and
easy to remember.
FILES
/var/lib/amanda/.am_passphrase
File containing the pass phrase. It should not be readable by any user other than the Amanda user.
SEE ALSO amanda(8), amanda.conf(5), openssl(1), amcrypt-ossl-asym(8)
The Amanda Wiki: : http://wiki.zmanda.com/
AUTHOR
Kevin Till <kevin.till@zmanda.com>
Zmanda, Inc. (http://www.zmanda.com)
NOTES
1. www.openssl.org
http://www.openssl.org/
2. www.diceware.com
http://www.diceware.com/
Amanda 3.3.3 01/10/2013 AMCRYPT-OSSL(8)
Check Out this Related Man Page
AMCRYPTSIMPLE(8) System Administration Commands AMCRYPTSIMPLE(8)NAME
amcryptsimple - reference simple crypt program for Amanda symmetric data encryption
SYNOPSIS
amcryptsimple to be called by Amanda only
DESCRIPTION
amcryptsimple calls gpg to perform symmetric data encryption on Amanda backup. amcryptsimple will search for the gpg program in the
following directories: /usr/local/bin:/usr/bin:/usr/sbin:/bin:/sbin
amcryptsimple uses one passphrase to encrypt the Amanda data and uses the same passphrase to decrypt the Amanda backup data. amcryptsimple
uses AES256 as the symmetric cipher.
HOW TO CREATE PASSPHRASE
Store the passphrase inside the home-directory of the Amanda user ($amanda_user) and protect it with proper permissions:
echo my_secret_passphrase > ~$amanda_user/.am_passphrase
chown $amanda_user:disk ~$amanda_user/.am_passphrase
chmod 700 ~$amanda_user/.am_passphrase
NOTES
Choose a good passphrase and protect it properly. Backup data can only be restored with the passphrase. There is no backdoor.
If storing and securing passphrase in your environment presents challenges, Amanda provide public-key data encryption through amgpgcrypt.
Public-key encryption uses the public key to encrypt and uses the private key to decrypt.
SEE ALSO amanda(8), amanda.conf(5), amcrypt(8), amgpgcrypt(8), amrestore(8), gpg(1)
The Amanda Wiki: : http://wiki.zmanda.com/
AUTHOR
Kevin Till <kevin.till@zmanda.com>
Zmanda, Inc. (http://www.zmanda.com)
Amanda 3.3.3 01/10/2013 AMCRYPTSIMPLE(8)
Hi,
I have been trying to upgrade my OpenSSL for a while now, tried looking for guides on the forums and found nothing.
I am trying to be able to use the "openssl version" command to be able to see the newer version
I compiled openssl-1.0.0a with vanilla config at start, then compiled it... (0 Replies)
I'm trying to delete everything after (and including) a particular phrase. The phrase that needs to be removed is anything with the letters "KV." For example:
ATHENIA 230KV ATHENISP
BAYONNE 13KV COGEN1
would become:
ATHENIA
BAYONNE
I'm using the following, but i'm not having much luck.... (4 Replies)
I have to write a program in Unix to do the following.Given a phrase like george hates john, by using naive Bayes to be able to restore the cases in the phrase and generate George hates John.I am not very familiar with Unix and i would appreciate any help (1 Reply)
Hi all...
As a mere amateur programmer it came to my attention recently of a phrase:-
Cargo Cult Programming...
After reading the wiki on it I think that I may have fallen into this category.
But then, I can only code in my own time and do not do it for a living so
there is always that... (1 Reply)
Hi all,
I have generated pass phrase key from Linux and copied into windows system. Then now we cant login to Linux from windows without that pass phrase key, unfortunately i forgot the pass phrase key. I have tried below procedures to recover it.
1. Have regenerated the id_RSA key again... (3 Replies)
Hi Guys sorry about post the code in portuguese but now i fix almost parts of code. now i can encryped and decryped the files but have a small problem. When not writte nathing generate automatically a random cypher but after the value of this cypher not appear igual than variable $saved_key. And... (2 Replies)
Hi,
My server is Centos 6 i686.
Is it possible get an openssl download from this site
"https://www.openssl.org/source/" (which is used for 64 bit platforms)
and use it on 32 bit platforms also?
Thx,
Aigini (5 Replies)