Why put that extra effort into rsync, if you can chain things together ?
The power of unix is exactly that - it`s not about using specialiced tools, but
it`s about combining them in innumerable ways, thus multiplying their
capabilities.
>Another good reason for a SSL-version of rsync: non-Unix clients...
Stunnel probably runs on as many platforms like rsync.
https://www.stunnel.org/ports.html
Besides that, mind that there is no usable native port of rsync on windows. (The
cygwin based rsync is very slow, btw)
I think stunnel even runs native on win32.(MinGW)
I was hoping for ssl in rsync for long, but when i saw RsyncSSL, i think it
could obsolete an rsync with compiled in ssl support.
Nobdoy would have the idea to put ssh into rsync, rsync is just using that as a
sub-process/pipe(and vice versa).
So does RsyncSSL (with stunnel).
On the server side, with rsync + ssh, the ssh daemon listens for incomming ssh
connection and then starts rsync, connecting via stdin/stdout.
Analogously, stunnel daemon listens for incoming ssl connection and then starts
rsync(d) as a sub-process. The only difference is, that RsyncSSL adds some
missing glue.
>I'd love to see rsync-ssl (with the server having CRL support, client
>cert support, and the client/server doing cert validation of course) as
>for one thing I think it would make a damn fine laptop backup solution.
It?s exactly what RsyncSSL can do for you.
regards
roland
>List: rsync
>Subject: Re: rsyncssl
>From: Jason Haar <Jason_Haar () trimble ! com>
>Date: 2013-02-04 2:45:47
>Message-ID: 510F20DB.7050003 () trimble ! com
>[Download message RAW]
>
>Another good reason for a SSL-version of rsync: non-Unix clients...
>
>It's all well and good to talk about using vpns and ssh tunnels - but
>the fact is that a large percentage of rsync clients are non-Unix - like
>Windows - and getting them set up for ssh/etc is layering extra software
>on top of rsync. I'm not saying it can't work - but it's not
simple.
>
>I'd love to see rsync-ssl (with the server having CRL support, client
>cert support, and the client/server doing cert validation of course) as
>for one thing I think it would make a damn fine laptop backup solution.
>I've run more than my share of Internet-facing services in my time and
>the lowest maintenance ones are the SSL/TLS services that require client
>certs. The bad guys cannot even "knock on the door"!
>
>An Internet-based rsync-ssl server that requires client certs would be
>brilliant for backing up laptops over the Internet: an enterprise
>competitor to all those cloudy services such as Dropbox/etc. :-) [well,
>probably need that VSS patch for rsync-win32 too ;-)]
>
>
>--
>Cheers
>
>Jason Haar
>Information Security Manager, Trimble Navigation Ltd.
>Phone: +1 408 481 8171
>PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1