Hi,
I have taken customer UCA DB backup on SMGR/Breeze platform. How can I manually restore it using CLI to a postgres DB after decryption? "conventional" mgmt* or pg_restore way does not seem to work.

Hi

What is the Breeze version that you have taken backup from. If the master node is prior to 3.3 then encryption is not supported , so no need to decrypt.
Also how are you performing decryption ? mgmtia/mgmtdr or pg_restore all these options must work. This is what is getting called internally when restore is hit from SMGR UI as well.
What error are you getting when you tried to perform restore using mgmt* or pg_restore command ?

one other info - the port on the cluster DB (DB for snap-ins) is running on 5433, so if you use any psql commands use the '-p 5433' option to it

Please answer the questions from Haani and the exact command you have used and the errorr message - these things can help us to proceed further

Thank You
Dinesh

version is 3.8.0.1

Command I tried to use after decryption:

mgmtdr -v -p 5433 -h localhost -U hadb -d uca_temp -F c ucaout

.pgr: [archiver] did not find magic string in file header

Also tried to use .pgr
I decrypted it with openssl

openssl aes-128-cbc -d -in cdb_AvayaWorkspacesEliteCluster1_ucastoreservice_ucadb_2021-07-16-10-5

59-00_0001 -out ucaout 

with no password.

Is your ucaout in plaintext?
Can you try without the '-F c' option like mgmtdr -v -p 5433 -h localhost -U hadb -d uca_temp ucaout

yes, I did with all three -F options. none worked. it is not plaintext, binary.

I believe the password for the openssl I used was wrong..

what encryption method breeze is using?

This is the command used to encrypt

openssl enc -aes-128-cbc -md SHA256 -salt -pass <password>

and to decrypt

openssl enc -aes-128-cbc -md SHA256 -salt -d -pass <password>

thank you, that indeed worked, at least did not throw an error, however the output file still binary. I tried to restore it to postgres getting the following:

mgmtdr -v -p 5433 -h localhost -U hadb -d uca_temp -F c ucaout11
.pgr: [archiver] did not find magic string in file header

Any suggestion what goes wrong?