[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Please test tarsnap 1.0.29 (now with re-encryption)



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi all,

Version 1.0.29 of the Tarsnap client code is ready for testing.  You can find it
at https://www.tarsnap.com/download/tarsnap-autoconf-1.0.29.tgz, and the tarball
has SHA256 hash a86dc84f1086ac5cf100f6af3da90d5aff44d395fe27b65acf7beeae8f4f49fa
right now.  (If I upload a new tarball to fix things, I'll send another email to
this list with an updated SHA256 hash.)

The only significant change since 1.0.28 is the addition of two new utilities:

* tarsnap-keyregen, which takes an existing key file and generates a new key
  file which is "compatible" with the old for the purpose of tarsnap-recrypt,
  and
* tarsnap-recrypt, which takes an old key file and a new key file, and reads
  all the data stored with the old keys, decrypts it, and re-encrypts and
  re-uploads it using the new keys.

Obviously, this arises out of the encryption bug I fixed in version 1.0.28; with
tarsnap-recrypt it's possible to keep all your historical archives rather than
needing to nuke everything and start over in order to eliminate potentially
poorly-encrypted data.

Please test. :-)

- -- 
Colin Percival
Security Officer, FreeBSD | freebsd.org | The power to serve
Founder / author, Tarsnap | tarsnap.com | Online backups for the truly paranoid
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (FreeBSD)

iEYEARECAAYFAk1JYywACgkQOM7KaQxqam6VLACfdnhcXjkMK9IPKbrphbnQ9PV/
MdgAnAmOfxwDFK2IU4+3fhUhunGol2pE
=EVBe
-----END PGP SIGNATURE-----