amssl - Man Page

Program to manage amanda ssl certificates


amssl [--client] [--init | --create-ca | --create-server-cert server-host | --create-client-cert client-host [--server server-host] ] [--country country-code] [--state state] [--locality locality] [--organisation organisation] [--organisation-unit organisation-unit] [--common common-name] [--email email] [-o configoption...] [--config config]


amssl is a program to manage amanda ssl certificates for the ssl auth. It can create self-signed CA, server certificate and client certificates.



Create a self-signed CA.


Create a server certificate.

--create-client-cert CLIENT-HOSTNAME

Create a client certificate.


The amanda server to connect to.


use the certificate fields set in the initialization, there is confirmation.

This option is useless if one the fields was not set in the initiatization.


When running amssl on a client.


Initialize the host.

The following options are the one needed by a certificate


The two letter country code.


The State.


The locality.


The organisation


The organisation unit.


The common name.


The email.


Must be run once before any other command

Create a template openssl.cnf file and a configuration file with the value provided, they are used in future command so you do not need to enter them at every invocation.

The value provided must be the one you want in the certificate.

amssl [--client] --init [--country country-code] [--state state] [--locality locality] [--organisation organisation] [--organisation-unit organisation-unit] [--common common-name] [--email email] [-o configoption...] [--config config]

A client is initialized with the --client options.



Create a Self-Signed Ca

Create a self-signed CA.

amssl --create-ca [--batch] [--config CONFIG]

You can also provide all options of the initialization step

You must enter a new CA passphrase, you must keep it secret and remember it. It will be required every time you need to create a new cetificate.

After you enter the passphrase, it will be asked 3 other times.



Create the Server Certificate

Create the amanda server certificate.

amssl --create-server-cert HOSTNAME [--batch] [--config CONFIG]

You can also provide all options of the initialization step

The CA passphrase is asked.


     $SSL_DIR/remote/HOSTNAME -> ../me

Create a Client Certificate

Create a client certificate, sign it by the CA certicate on the server and both server and client learn the remore fingerprint.

DO NOT RUN IT ON SERVER. This will detroy the server certificate

It require to run amssl on the server and client at the same time

ssl-dir must be set in amanda-client.conf on the client.

Both server and client must already be initialized.

Run on the server:

amssl --create-client-cert client-host [--config CONFIG]

It wait for the client to connect and then sign the client certificate, The CA passphrase is asked.

Run on the client:

amssl --client --create-client-cert CLIENT-HOST --server SERVER-HOST [--batch] [--config CONFIG]

Create on server


Create on client



Initialize the server

amssl --init --country US --state California --locality Sunnyvale --organisation zmanda --organistion-unit engineering --common boss --email ''

Create the CA on the server

Create the server certificate

amssl --create-server-cert

Create a client certificate

On server:

amssl --create-client-cert

On client:

amssl --client --init --country US --state California --locality Sunnyvale --organisation zmanda --organistion-unit engineering --common boss --email ''

amssl --client --create-client-cert --server

See Also

amanda(8), amanda.conf(5), amanda-client.conf(5), amanda(8), amanda-auth(7), amanda-auth-ssl(7)

The Amanda Wiki: :


James da Silva <>

Stefan G. Weichinger <>

Referenced By


12/01/2017 Amanda 3.5.1 System Administration Commands