duplicity-talk
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Duplicity-talk] Encrypt without the private key?


From: Norbert Kéri
Subject: [Duplicity-talk] Encrypt without the private key?
Date: Sat, 28 Mar 2015 13:13:30 +0100

Hey,

I'm trying to set up an unattended backup to S3, with the following command:

duplicity --progress --name mystuff --full-if-older-than 6M --s3-unencrypted-connection --encrypt-key A6ACD7BF ./myfolder s3://s3.eu-central-1.amazonaws.com/bucket/folder

However, if I rerun the above command, I get:

Local and Remote metadata are synchronized, no sync needed.
Last inc backup left a partial set, restarting.
Last full backup date: Sun Mar 22 16:54:42 2015

Then it pops up a pinentry dialog, asking for the passphrase for my private key. This surprised me, because I was expecting it to only ask for a passphrase when I restore files from the backup. Even more, if I just cancel the pinentry password dialog, it successfully finishes the backup, so it's not even using the key?

So what's happening here? Does duplicity need to decrypt some parts of the previous backup, is that why it's asking for a key? Why does it continue if I cancel the dialog then? I was thinking maybe it's trying to sign the backups, but I'm not using any of the signing switches, and it doesn't do that by default?

I have found some references to this problem, from a few years ago:
http://lists.nongnu.org/archive/html/duplicity-talk/2012-07/msg00005.html
https://answers.launchpad.net/duplicity/+question/107216

Is this still a problem?

reply via email to

[Prev in Thread] Current Thread [Next in Thread]