3 rsync-ssl - a helper script for connecting to an ssl rsync daemon
8 rsync-ssl [--type=SSL_TYPE] RSYNC_ARGS
13 The rsync-ssl script helps you to run an rsync copy to/from an rsync daemon
14 that requires ssl connections.
16 The script requires that you specify an rsync-daemon arg in the style of either
17 `hostname::` (with 2 colons) or `rsync://hostname/`. The default port used for
18 connecting is 874 (one higher than the normal 873) unless overridden in the
19 environment. You can specify an overriding port via `--port` or by including
20 it in the normal spot in the URL format, though both of those require your
21 rsync version to be at least 3.2.0.
25 If the **first** arg is a `--type=SSL_TYPE` option, the script will only use
26 that particular program to open an ssl connection instead of trying to find an
27 openssl or stunnel executable via a simple heuristic (assuming that the
28 `RSYNC_SSL_TYPE` environment variable is not set as well -- see below). This
29 option must specify one of `openssl` or `stunnel`. The equal sign is
30 required for this particular option.
32 All the other options are passed through to the rsync command, so consult the
33 **rsync**(1) manpage for more information on how it works.
35 ## ENVIRONMENT VARIABLES
37 The ssl helper scripts are affected by the following environment variables:
41 Specifies the program type that should be used to open the ssl connection.
42 It must be one of `openssl` or `stunnel`. The `--type=SSL_TYPE` option
43 overrides this, when specified.
47 If specified, the value is the port number that is used as the default when
48 the user does not specify a port in their rsync command. When not
49 specified, the default port number is 874. (Note that older rsync versions
50 (prior to 3.2.0) did not communicate an overriding port number value to the
55 If specified, the value is a filename that contains a certificate to use
60 If specified, the value is a filename that contains a key for the provided
61 certificate to use for the connection.
63 0. `RSYNC_SSL_CA_CERT`
65 If specified, the value is a filename that contains a certificate authority
66 certificate that is used to validate the connection.
68 0. `RSYNC_SSL_OPENSSL`
70 Specifies the openssl executable to run when the connection type is set to
71 openssl. If unspecified, the $PATH is searched for "openssl".
75 Specifies the gnutls-cli executable to run when the connection type is set
76 to gnutls. If unspecified, the $PATH is searched for "gnutls-cli".
78 0. `RSYNC_SSL_STUNNEL`
80 Specifies the stunnel executable to run when the connection type is set to
81 stunnel. If unspecified, the $PATH is searched first for "stunnel4" and
86 > rsync-ssl -aiv example.com::mod/ dest
88 > rsync-ssl --type=openssl -aiv example.com::mod/ dest
90 > rsync-ssl -aiv --port 9874 example.com::mod/ dest
92 > rsync-ssl -aiv rsync://example.com:9874/mod/ dest
96 **rsync**(1), **rsyncd.conf**(5)
100 Note that using an stunnel connection requires at least version 4 of stunnel,
101 which should be the case on modern systems. Also, it does not verify a
102 connection against the CA certificate collection, so it only encrypts the
103 connection without any cert validation unless you have specified the
104 certificate environment options.
106 This script also supports a `--type=gnutls` option, but at the time of this
107 release the gnutls-cli command was dropping output, making it unusable. If
108 that bug has been fixed in your version, feel free to put gnutls into an
109 exported RSYNC_SSL_TYPE environment variable to make its use the default.
113 Please report bugs! See the web site at <https://rsync.samba.org/>.
117 This man page is current for version @VERSION@ of rsync.
121 rsync is distributed under the GNU General Public License. See the file
124 A web site is available at <https://rsync.samba.org/>. The site includes an
125 FAQ-O-Matic which may cover questions unanswered by this manual page.
129 This manpage was written by Wayne Davison.
131 Mailing lists for support and development are available at
132 <https://lists.samba.org/>.