---
name: "amanda-auth-ssl"
section: "7"
platform: "linux"
package: "amanda-common"
version: "1:3.5.4-2"
release: "Debian 13 (Trixie)"
platforms: ["linux"]
url: "https://new.carta.tech/amanda-auth-ssl"
---

# amanda-auth-ssl(7)

SSL Communication/Authentication methods between Amanda server and client

## NAME

amanda-auth-ssl - SSL Communication/Authentication methods between Amanda server and client

## DESCRIPTION

This authenticate method use ssl certificate to authenticate host, all transfer over the network is encrypted.

Each amanda client/server must have its own certificate signed by the amanda CA certificate.

## COMPILATION AND GENERAL INFORMATION

Amanda must be configure with --with-ssl-security

## SERVER/CLIENT CONFIGURATION

In **amanda.conf** and **amanda-client.conf**.

**ssl-dir**

The directoty where amanda store all the certificates. A good value is **~/amanda-ssl**.

**ssl-check-certificate-host**

Check the peer hostname match the certificate host name.

**ssl-check-fingerprint**

Check the fingerprint of the certificate is the same as the fingerprint we already have for that host.

**ssl-check-host**

Do the bsd check, dns name of peer IP is the hostname we connect to.

## FILESYSTEM LAYOUT FOR CERTIFICATES

```
$SSL_DIR/CA/crt.pem                   # CA certificate that signed
                                        all certificates.
$SSL_DIR/CA/private/key.pem           # CA private key
                                        (on server only)
$SSL_DIR/me/crt.pem                   # public certificate of the host
$SSL_DIR/me/private/key.pem           # private key of the host
$SSL_DIR/me/fingerprint               # fingerprint of my certificate
$SSL_DIR/remote/HOSTNAME/fingerprint  # fingerprint of the HOSTNAME
                                        certificate
```

On the **HOSTNAME** host, **$SSL\_DIR/remote/HOSTNAME** is a symbolic link to **../me**.

## PROGRAM TO HELP CONFIGURATION

The **amssl** program is a tool to manage the certificate.

## SEE ALSO

[**amanda**(8)](/amanda/8.md), [**amanda.conf**(5)](/amanda.conf/5.md), [**amanda-client.conf**(5)](/amanda-client.conf/5.md), [**disklist**(5)](/disklist/5.md), [**amdump**(8)](/amdump/8.md), [**amrecover**(8)](/amrecover/8.md), [**amssl**(8)](/amssl/8.md), [**amanda-auth**(7)](/amanda-auth/7.md)

The Amanda Wiki: : http://wiki.zmanda.com/

## AUTHORS

**Jean-Louis Martineau** \<martineau@zmanda.com\>

Zmanda, Inc. (http://www.zmanda.com)

**Dustin J. Mitchell** \<dustin@zmanda.com\>

Zmanda, Inc. (http://www.zmanda.com)

**Paul Yeatman** \<pyeatman@zmanda.com\>

Zmanda, Inc. (http://www.zmanda.com)