Skip to content
Snippets Groups Projects
Commit a036144d authored by intrigeri's avatar intrigeri
Browse files

Documentation: recommend using 4096 bits RSA keys everywhere.

parent 8190b0db
No related branches found
No related tags found
No related merge requests found
...@@ -32,6 +32,8 @@ version 0.9.9 -- UNRELEASED ...@@ -32,6 +32,8 @@ version 0.9.9 -- UNRELEASED
the patch. the patch.
rdiff: rdiff:
. Generate 4096 bits RSA keys. . Generate 4096 bits RSA keys.
documentation changes
. Recommend using 4096 bits RSA keys everywhere.
version 0.9.8.1 -- October 31, 2010 (boo!) version 0.9.8.1 -- October 31, 2010 (boo!)
backupninja changes backupninja changes
......
...@@ -201,8 +201,8 @@ In order for rdiff-backup to sync files over ssh unattended, you must ...@@ -201,8 +201,8 @@ In order for rdiff-backup to sync files over ssh unattended, you must
create ssh keys on the source server and copy the public key to the create ssh keys on the source server and copy the public key to the
remote user's authorized keys file. For example: remote user's authorized keys file. For example:
root@srchost# ssh-keygen -t dsa root@srchost# ssh-keygen -t rsa -b 4096
root@srchost# ssh-copy-id -i /root/.ssh/id_dsa.pub backup@desthost root@srchost# ssh-copy-id -i /root/.ssh/id_rsa.pub backup@desthost
Now, you should be able to ssh from user 'root' on srchost to Now, you should be able to ssh from user 'root' on srchost to
user 'backup' on desthost without specifying a password. user 'backup' on desthost without specifying a password.
......
...@@ -203,7 +203,7 @@ exclude = /var/cache/backupninja/duplicity ...@@ -203,7 +203,7 @@ exclude = /var/cache/backupninja/duplicity
## warning: sftp does not support all scp options, especially -i; as ## warning: sftp does not support all scp options, especially -i; as
## a workaround, you can use "-o <SSHOPTION>" ## a workaround, you can use "-o <SSHOPTION>"
## an example setting would be: ## an example setting would be:
## sshoptions = -o IdentityFile=/root/.ssh/id_dsa_duplicity ## sshoptions = -o IdentityFile=/root/.ssh/id_rsa_duplicity
## ##
## Default: ## Default:
# sshoptions = # sshoptions =
......
...@@ -449,7 +449,7 @@ bandwidthlimit = $dup_bandwidth ...@@ -449,7 +449,7 @@ bandwidthlimit = $dup_bandwidth
# passed directly to ssh, scp (and sftp in duplicity >=0.4.2) # passed directly to ssh, scp (and sftp in duplicity >=0.4.2)
# warning: sftp does not support all scp options, especially -i; as # warning: sftp does not support all scp options, especially -i; as
# a workaround, you can use "-o <SSHOPTION>" # a workaround, you can use "-o <SSHOPTION>"
#sshoptions = -o IdentityFile=/root/.ssh/id_dsa_duplicity #sshoptions = -o IdentityFile=/root/.ssh/id_rsa_duplicity
sshoptions = $dup_sshoptions sshoptions = $dup_sshoptions
# put the backups under this destination directory # put the backups under this destination directory
......
...@@ -104,7 +104,7 @@ Then, vital parts of the file system, including /var/backups, are nightly pushed ...@@ -104,7 +104,7 @@ Then, vital parts of the file system, including /var/backups, are nightly pushed
.TP .TP
In order for this to work (ie for diff-backup to run unattended), you must create ssh keys on the source server and copy the public key to the remote user's authorized keys file. For example: In order for this to work (ie for diff-backup to run unattended), you must create ssh keys on the source server and copy the public key to the remote user's authorized keys file. For example:
.br .br
root@srchost# ssh-keygen -t dsa root@srchost# ssh-keygen -t rsa -b 4096
.br .br
root@srchost# ssh-copy-id -i /root/.ssh/id_dsa.pub backup@desthost root@srchost# ssh-copy-id -i /root/.ssh/id_dsa.pub backup@desthost
.TP .TP
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment