Reyna v4

🟣 Reyna v4

Path: / / usr / bin

Full Path (server): /usr/bin

📄 GET [E] [D]
📄 Mail [E] [D]
📄 [ [E] [D]
📄 aclocal [E] [D]
📄 aclocal-1.16 [E] [D]
📄 addr2line [E] [D]
📄 agentxtrap [E] [D]
📄 animate [E] [D]
📄 ar [E] [D]
📄 arch [E] [D]
📄 arpaname [E] [D]
📄 as [E] [D]
📄 aspell [E] [D]
📄 at [E] [D]
📄 atq [E] [D]
📄 atrm [E] [D]
📄 autoconf [E] [D]
📄 autoheader [E] [D]
📄 autom4te [E] [D]
📄 automake [E] [D]
📄 automake-1.16 [E] [D]
📄 autoreconf [E] [D]
📄 autoscan [E] [D]
📄 autoupdate [E] [D]
📄 awk [E] [D]
📄 b2sum [E] [D]
📄 base32 [E] [D]
📄 base64 [E] [D]
📄 basename [E] [D]
📄 basenc [E] [D]
📄 bash [E] [D]
📄 bashbug-64 [E] [D]
📄 batch [E] [D]
📄 bison [E] [D]
📄 brotli [E] [D]
📄 bunzip2 [E] [D]
📄 bzcat [E] [D]
📄 bzcmp [E] [D]
📄 bzdiff [E] [D]
📄 bzgrep [E] [D]
📄 bzip2 [E] [D]
📄 bzip2recover [E] [D]
📄 bzless [E] [D]
📄 bzmore [E] [D]
📄 c++ [E] [D]
📄 c++filt [E] [D]
📄 c89 [E] [D]
📄 c99 [E] [D]
📄 cagefs_enter.proxied [E] [D]
📄 cal [E] [D]
📄 captoinfo [E] [D]
📄 cat [E] [D]
📄 catchsegv [E] [D]
📄 cc [E] [D]
📄 chcon [E] [D]
📄 chgrp [E] [D]
📄 chmod [E] [D]
📄 chown [E] [D]
📄 chrt [E] [D]
📄 cksum [E] [D]
📄 cldetect [E] [D]
📄 clear [E] [D]
📄 clusterdb [E] [D]
📄 cmp [E] [D]
📄 col [E] [D]
📄 colcrt [E] [D]
📄 colrm [E] [D]
📄 column [E] [D]
📄 comm [E] [D]
📄 compare [E] [D]
📄 composite [E] [D]
📄 conjure [E] [D]
📄 convert [E] [D]
📄 cp [E] [D]
📄 cpan [E] [D]
📄 cpp [E] [D]
📄 createdb [E] [D]
📄 createuser [E] [D]
📄 crontab [E] [D]
📄 crontab.cagefs [E] [D]
📄 csplit [E] [D]
📄 curl [E] [D]
📄 cut [E] [D]
📄 cyrusbdb2current [E] [D]
📄 date [E] [D]
📄 dbiprof [E] [D]
📄 dd [E] [D]
📄 delv [E] [D]
📄 df [E] [D]
📄 diff [E] [D]
📄 diff3 [E] [D]
📄 dig [E] [D]
📄 dir [E] [D]
📄 dircolors [E] [D]
📄 dirname [E] [D]
📄 display [E] [D]
📄 dnstap-read [E] [D]
📄 dropdb [E] [D]
📄 dropuser [E] [D]
📄 du [E] [D]
📄 echo [E] [D]
📄 ed [E] [D]
📄 egrep [E] [D]
📄 enc2xs [E] [D]
📄 enchant [E] [D]
📄 enchant-lsmod [E] [D]
📄 env [E] [D]
📄 eps2eps [E] [D]
📄 eqn [E] [D]
📄 ex [E] [D]
📄 expand [E] [D]
📄 expr [E] [D]
📄 factor [E] [D]
📄 false [E] [D]
📄 fc-cache [E] [D]
📄 fc-cache-64 [E] [D]
📄 fc-cat [E] [D]
📄 fc-conflist [E] [D]
📄 fc-list [E] [D]
📄 fc-match [E] [D]
📄 fc-pattern [E] [D]
📄 fc-query [E] [D]
📄 fc-scan [E] [D]
📄 fc-validate [E] [D]
📄 ffmpeg [E] [D]
📄 ffplay [E] [D]
📄 ffprobe [E] [D]
📄 fgrep [E] [D]
📄 file [E] [D]
📄 find [E] [D]
📄 flex [E] [D]
📄 flex++ [E] [D]
📄 flock [E] [D]
📄 fmt [E] [D]
📄 fold [E] [D]
📄 free [E] [D]
📄 freetype-config [E] [D]
📄 funzip [E] [D]
📄 g++ [E] [D]
📄 gawk [E] [D]
📄 gcc [E] [D]
📄 gcc-ar [E] [D]
📄 gcc-nm [E] [D]
📄 gcc-ranlib [E] [D]
📄 gcov [E] [D]
📄 gcov-dump [E] [D]
📄 gcov-tool [E] [D]
📄 gem [E] [D]
📄 gencat [E] [D]
📄 geoiplookup [E] [D]
📄 geoiplookup6 [E] [D]
📄 geqn [E] [D]
📄 getconf [E] [D]
📄 getent [E] [D]
📄 getopt [E] [D]
📄 ghostscript [E] [D]
📄 git [E] [D]
📄 git-receive-pack [E] [D]
📄 git-shell [E] [D]
📄 git-upload-archive [E] [D]
📄 git-upload-pack [E] [D]
📄 gm [E] [D]
📄 gmake [E] [D]
📄 gneqn [E] [D]
📄 gnroff [E] [D]
📄 gpg [E] [D]
📄 gpg-agent [E] [D]
📄 gpg-error [E] [D]
📄 gpgsplit [E] [D]
📄 gpgv [E] [D]
📄 gpic [E] [D]
📄 gprof [E] [D]
📄 grep [E] [D]
📄 groff [E] [D]
📄 grops [E] [D]
📄 grotty [E] [D]
📄 groups [E] [D]
📄 gs [E] [D]
📄 gsnd [E] [D]
📄 gsoelim [E] [D]
📄 gtar [E] [D]
📄 gtbl [E] [D]
📄 gtroff [E] [D]
📄 gunzip [E] [D]
📄 gzexe [E] [D]
📄 gzip [E] [D]
📄 h2ph [E] [D]
📄 h2xs [E] [D]
📄 head [E] [D]
📄 hexdump [E] [D]
📄 host [E] [D]
📄 hostid [E] [D]
📄 hostname [E] [D]
📄 hunspell [E] [D]
📄 iconv [E] [D]
📄 icu-config [E] [D]
📄 icu-config-64 [E] [D]
📄 icuinfo [E] [D]
📄 id [E] [D]
📄 identify [E] [D]
📄 idn [E] [D]
📄 ifnames [E] [D]
📄 import [E] [D]
📄 infocmp [E] [D]
📄 infotocap [E] [D]
📄 install [E] [D]
📄 instmodsh [E] [D]
📄 ionice [E] [D]
📄 ipcrm [E] [D]
📄 ipcs [E] [D]
📄 isosize [E] [D]
📄 ispell [E] [D]
📄 join [E] [D]
📄 jq [E] [D]
📄 kill [E] [D]
📄 ld [E] [D]
📄 ld.bfd [E] [D]
📄 ldd [E] [D]
📄 less [E] [D]
📄 lessecho [E] [D]
📄 lesskey [E] [D]
📄 lesspipe.sh [E] [D]
📄 lex [E] [D]
📄 libnetcfg [E] [D]
📄 libtool [E] [D]
📄 libtoolize [E] [D]
📄 link [E] [D]
📄 ln [E] [D]
📄 locale [E] [D]
📄 localedef [E] [D]
📄 logger [E] [D]
📄 login [E] [D]
📄 logname [E] [D]
📄 look [E] [D]
📄 ls [E] [D]
📄 lto-dump [E] [D]
📄 m4 [E] [D]
📄 mail [E] [D]
📄 mailx [E] [D]
📄 mailx.s-nail [E] [D]
📄 make [E] [D]
📄 make-dummy-cert [E] [D]
📄 mariadb [E] [D]
📄 mariadb-access [E] [D]
📄 mariadb-admin [E] [D]
📄 mariadb-binlog [E] [D]
📄 mariadb-check [E] [D]
📄 mariadb-conv [E] [D]
📄 mariadb-convert-table-format [E] [D]
📄 mariadb-dump [E] [D]
📄 mariadb-dumpslow [E] [D]
📄 mariadb-embedded [E] [D]
📄 mariadb-find-rows [E] [D]
📄 mariadb-hotcopy [E] [D]
📄 mariadb-import [E] [D]
📄 mariadb-plugin [E] [D]
📄 mariadb-secure-installation [E] [D]
📄 mariadb-setpermission [E] [D]
📄 mariadb-show [E] [D]
📄 mariadb-slap [E] [D]
📄 mariadb-tzinfo-to-sql [E] [D]
📄 mariadb-waitpid [E] [D]
📄 mcookie [E] [D]
📄 md5sum [E] [D]
📄 memcached [E] [D]
📄 memcached-tool [E] [D]
📄 mesg [E] [D]
📄 mkdir [E] [D]
📄 mkfifo [E] [D]
📄 mknod [E] [D]
📄 mktemp [E] [D]
📄 mogrify [E] [D]
📄 montage [E] [D]
📄 more [E] [D]
📄 msql2mysql [E] [D]
📄 mv [E] [D]
📄 my_print_defaults [E] [D]
📄 mysql [E] [D]
📄 mysql_config [E] [D]
📄 mysql_find_rows [E] [D]
📄 mysql_waitpid [E] [D]
📄 mysqlaccess [E] [D]
📄 mysqladmin [E] [D]
📄 mysqlbinlog [E] [D]
📄 mysqlcheck [E] [D]
📄 mysqldump [E] [D]
📄 mysqlimport [E] [D]
📄 mysqlshow [E] [D]
📄 mytop [E] [D]
📄 nail [E] [D]
📄 namei [E] [D]
📄 nano [E] [D]
📄 neqn [E] [D]
📄 net-snmp-create-v3-user [E] [D]
📄 nice [E] [D]
📄 nl [E] [D]
📄 nm [E] [D]
📄 nohup [E] [D]
📄 nproc [E] [D]
📄 nroff [E] [D]
📄 nslookup [E] [D]
📄 nsupdate [E] [D]
📄 numfmt [E] [D]
📄 objcopy [E] [D]
📄 objdump [E] [D]
📄 od [E] [D]
📄 openssl [E] [D]
📄 pango-list [E] [D]
📄 pango-segmentation [E] [D]
📄 pango-view [E] [D]
📄 passenger [E] [D]
📄 passwd [E] [D]
📄 paste [E] [D]
📄 patch [E] [D]
📄 pathchk [E] [D]
📄 pdf2dsc [E] [D]
📄 pdf2ps [E] [D]
📄 perl [E] [D]
📄 perl5.32.1 [E] [D]
📄 perlbug [E] [D]
📄 perldoc [E] [D]
📄 perlivp [E] [D]
📄 perlml [E] [D]
📄 perlthanks [E] [D]
📄 pg_dump [E] [D]
📄 pg_dumpall [E] [D]
📄 pg_restore [E] [D]
📄 pgrep [E] [D]
📄 php [E] [D]
📄 pic [E] [D]
📄 piconv [E] [D]
📄 ping [E] [D]
📄 pinky [E] [D]
📄 pkg-config [E] [D]
📄 pkill [E] [D]
📄 pl2pm [E] [D]
📄 pmap [E] [D]
📄 pod2html [E] [D]
📄 pod2man [E] [D]
📄 pod2text [E] [D]
📄 pod2usage [E] [D]
📄 podchecker [E] [D]
📄 post-grohtml [E] [D]
📄 pr [E] [D]
📄 pre-grohtml [E] [D]
📄 precat [E] [D]
📄 preunzip [E] [D]
📄 prezip [E] [D]
📄 prezip-bin [E] [D]
📄 printenv [E] [D]
📄 printf [E] [D]
📄 prove [E] [D]
📄 ps [E] [D]
📄 ps2ascii [E] [D]
📄 ps2epsi [E] [D]
📄 ps2pdf [E] [D]
📄 ps2pdf12 [E] [D]
📄 ps2pdf13 [E] [D]
📄 ps2pdf14 [E] [D]
📄 ps2pdfwr [E] [D]
📄 ps2ps [E] [D]
📄 ps2ps2 [E] [D]
📄 psql [E] [D]
📄 ptx [E] [D]
📄 pwd [E] [D]
📄 pwdx [E] [D]
📄 pydoc [E] [D]
📄 pydoc3 [E] [D]
📄 pydoc3.9 [E] [D]
📄 python [E] [D]
📄 python3 [E] [D]
📄 python3.9 [E] [D]
📄 qt-faststart [E] [D]
📄 ranlib [E] [D]
📄 readelf [E] [D]
📄 readlink [E] [D]
📄 realpath [E] [D]
📄 recode [E] [D]
📄 red [E] [D]
📄 redis-benchmark [E] [D]
📄 redis-check-aof [E] [D]
📄 redis-check-rdb [E] [D]
📄 redis-cli [E] [D]
📄 redis-sentinel [E] [D]
📄 redis-server [E] [D]
📄 reindexdb [E] [D]
📄 rename [E] [D]
📄 renew-dummy-cert [E] [D]
📄 renice [E] [D]
📄 replace [E] [D]
📄 reset [E] [D]
📄 rev [E] [D]
📄 rm [E] [D]
📄 rmdir [E] [D]
📄 rnano [E] [D]
📄 rsync [E] [D]
📄 rsync-ssl [E] [D]
📄 ruby [E] [D]
📄 run-with-aspell [E] [D]
📄 runcon [E] [D]
📄 rvi [E] [D]
📄 rview [E] [D]
📄 rvim [E] [D]
📄 s-nail [E] [D]
📄 scalar [E] [D]
📄 scl [E] [D]
📄 scl_enabled [E] [D]
📄 scl_source [E] [D]
📄 scp [E] [D]
📄 screen [E] [D]
📄 script [E] [D]
📄 sdiff [E] [D]
📄 sed [E] [D]
📄 selectorctl [E] [D]
📄 seq [E] [D]
📄 setsid [E] [D]
📄 setterm [E] [D]
📄 sftp [E] [D]
📄 sh [E] [D]
📄 sha1sum [E] [D]
📄 sha224sum [E] [D]
📄 sha256sum [E] [D]
📄 sha384sum [E] [D]
📄 sha512sum [E] [D]
📄 shred [E] [D]
📄 shuf [E] [D]
📄 size [E] [D]
📄 skill [E] [D]
📄 slabtop [E] [D]
📄 sleep [E] [D]
📄 snice [E] [D]
📄 snmpconf [E] [D]
📄 soelim [E] [D]
📄 sort [E] [D]
📄 spell [E] [D]
📄 splain [E] [D]
📄 split [E] [D]
📄 sprof [E] [D]
📄 sqlite3 [E] [D]
📄 ssh [E] [D]
📄 ssh-add [E] [D]
📄 ssh-agent [E] [D]
📄 ssh-copy-id [E] [D]
📄 ssh-keygen [E] [D]
📄 ssh-keyscan [E] [D]
📄 sss_ssh_knownhostsproxy [E] [D]
📄 stat [E] [D]
📄 stdbuf [E] [D]
📄 strace [E] [D]
📄 stream [E] [D]
📄 strings [E] [D]
📄 strip [E] [D]
📄 stty [E] [D]
📄 sum [E] [D]
📄 sync [E] [D]
📄 tabs [E] [D]
📄 tac [E] [D]
📄 tail [E] [D]
📄 tar [E] [D]
📄 taskset [E] [D]
📄 tbl [E] [D]
📄 tclsh [E] [D]
📄 tclsh8.6 [E] [D]
📄 tee [E] [D]
📄 test [E] [D]
📄 tic [E] [D]
📄 timeout [E] [D]
📄 tload [E] [D]
📄 tmpwatch [E] [D]
📄 toe [E] [D]
📄 top [E] [D]
📄 touch [E] [D]
📄 tput [E] [D]
📄 tr [E] [D]
📄 tree [E] [D]
📄 troff [E] [D]
📄 true [E] [D]
📄 truncate [E] [D]
📄 tset [E] [D]
📄 tsort [E] [D]
📄 tty [E] [D]
📄 tzselect [E] [D]
📄 uapi [E] [D]
📄 ul [E] [D]
📄 uname [E] [D]
📄 unexpand [E] [D]
📄 uniq [E] [D]
📄 unlink [E] [D]
📄 unzip [E] [D]
📄 unzipsfx [E] [D]
📄 uptime [E] [D]
📄 users [E] [D]
📄 utmpdump [E] [D]
📄 vacuumdb [E] [D]
📄 vdir [E] [D]
📄 vi [E] [D]
📄 view [E] [D]
📄 vim [E] [D]
📄 vimdiff [E] [D]
📄 vimtutor [E] [D]
📄 vmstat [E] [D]
📄 watch [E] [D]
📄 wc [E] [D]
📄 wget [E] [D]
📄 whereis [E] [D]
📄 which [E] [D]
📄 who [E] [D]
📄 whoami [E] [D]
📄 word-list-compress [E] [D]
📄 x86_64-redhat-linux-c++ [E] [D]
📄 x86_64-redhat-linux-g++ [E] [D]
📄 x86_64-redhat-linux-gcc [E] [D]
📄 x86_64-redhat-linux-gcc-11 [E] [D]
📄 xargs [E] [D]
📄 xmlcatalog [E] [D]
📄 xmllint [E] [D]
📄 xmlwf [E] [D]
📄 xsltproc [E] [D]
📄 xsubpp [E] [D]
📄 xxd [E] [D]
📄 yes [E] [D]
📄 zcat [E] [D]
📄 zcmp [E] [D]
📄 zdiff [E] [D]
📄 zegrep [E] [D]
📄 zfgrep [E] [D]
📄 zforce [E] [D]
📄 zgrep [E] [D]
📄 zip [E] [D]
📄 zipcloak [E] [D]
📄 zipgrep [E] [D]
📄 zipinfo [E] [D]
📄 zipnote [E] [D]
📄 zipsplit [E] [D]
📄 zless [E] [D]
📄 zmore [E] [D]
📄 znew [E] [D]
📄 zsoelim [E] [D]

Editing: rsync-ssl

#!/usr/bin/bash

# This script uses openssl, gnutls, or stunnel to secure an rsync daemon connection.

# By default this script takes rsync args and hands them off to the actual
# rsync command with an --rsh option that makes it open an SSL connection to an
# rsync daemon.  See the rsync-ssl manpage for usage details and env variables.

# When the first arg is --HELPER, we are being used by rsync as an --rsh helper
# script, and the args are (note the trailing dot):
#
#    rsync-ssl --HELPER HOSTNAME rsync --server --daemon .
#
# --HELPER is not a user-facing option, so it is not documented in the manpage.

# The first SSL setup was based on:  http://dozzie.jarowit.net/trac/wiki/RsyncSSL
# Note that an stunnel connection requires at least version 4.x of stunnel.

function rsync_ssl_run {
    case "$*" in
    *rsync://*) ;;
    *::*) ;;
    *)
	echo "You must use rsync-ssl with a daemon-style hostname." 1>&2
	exit 1
	;;
    esac

exec rsync --rsh="'$0' --HELPER" "${@}"
}

function rsync_ssl_helper {
    if [[ -z "$RSYNC_SSL_TYPE" ]]; then
	found=`path_search openssl stunnel4 stunnel` || exit 1
	if [[ "$found" == */openssl ]]; then
	    RSYNC_SSL_TYPE=openssl
	    RSYNC_SSL_OPENSSL="$found"
	elif [[ "$found" == */gnutls-cli ]]; then
	    RSYNC_SSL_TYPE=gnutls
	    RSYNC_SSL_GNUTLS="$found"
	else
	    RSYNC_SSL_TYPE=stunnel
	    RSYNC_SSL_STUNNEL="$found"
	fi
    fi

case "$RSYNC_SSL_TYPE" in
	openssl)
	    if [[ -z "$RSYNC_SSL_OPENSSL" ]]; then
		RSYNC_SSL_OPENSSL=`path_search openssl` || exit 1
	    fi
	    optsep=' '
	    ;;
	gnutls)
	    if [[ -z "$RSYNC_SSL_GNUTLS" ]]; then
		RSYNC_SSL_GNUTLS=`path_search gnutls-cli` || exit 1
	    fi
	    optsep=' '
	    ;;
	stunnel)
	    if [[ -z "$RSYNC_SSL_STUNNEL" ]]; then
		RSYNC_SSL_STUNNEL=`path_search stunnel4 stunnel` || exit 1
	    fi
	    optsep=' = '
	    ;;
	*)
	    echo "The RSYNC_SSL_TYPE specifies an unknown type: $RSYNC_SSL_TYPE" 1>&2
	    exit 1
	    ;;
    esac

if [[ -z "$RSYNC_SSL_CERT" ]]; then
	certopt=""
	gnutls_cert_opt=""
    else
	certopt="-cert$optsep$RSYNC_SSL_CERT"
	gnutls_cert_opt="--x509certfile=$RSYNC_SSL_CERT"
    fi

if [[ -z "$RSYNC_SSL_KEY" ]]; then
	keyopt=""
	gnutls_key_opt=""
    else
	keyopt="-key$optsep$RSYNC_SSL_KEY"
	gnutls_key_opt="--x509keyfile=$RSYNC_SSL_KEY"
    fi

if [[ -z ${RSYNC_SSL_CA_CERT+x} ]]; then
	# RSYNC_SSL_CA_CERT unset - default CA set AND verify:
	# openssl:
	caopt="-verify_return_error -verify 4"
	# gnutls:
	# gnutls-cli has no reliable "use the system trust store AND make
	# verification fatal" switch across versions, so the gnutls path
	# refuses below unless RSYNC_SSL_ALLOW_INSECURE_GNUTLS is set.
	gnutls_opts=""
	# stunnel:
	# Since there is no way of using the default CA certificate collection,
	# we cannot do any verification. Thus, stunnel should really only be
	# used if nothing else is available.
	cafile=""
	verify=""
    elif [[ "$RSYNC_SSL_CA_CERT" == "" ]]; then
	# RSYNC_SSL_CA_CERT set but empty -do NO verifications:
	# openssl:
	caopt="-verify 1"
	# gnutls:
	gnutls_opts="--insecure"
	# stunnel:
	cafile=""
	verify="verifyChain = no"
    else
	# RSYNC_SSL_CA_CERT set - use CA AND verify:
	# openssl:
	caopt="-CAfile $RSYNC_SSL_CA_CERT -verify_return_error -verify 4"
	# gnutls:
	gnutls_opts="--x509cafile=$RSYNC_SSL_CA_CERT"
	# stunnel:
	cafile="CAfile = $RSYNC_SSL_CA_CERT"
	verify="verifyChain = yes"
    fi

port="${RSYNC_PORT:-0}"
    if [[ "$port" == 0 ]]; then
	port="${RSYNC_SSL_PORT:-874}"
    fi

# If the user specified USER@HOSTNAME::module, then rsync passes us
    # the -l USER option too, so we must be prepared to ignore it.
    if [[ "$1" == "-l" ]]; then
	shift 2
    fi

hostname="$1"
    shift

if [[ -z "$hostname" || "$1" != rsync || "$2" != --server || "$3" != --daemon ]]; then
	echo "Usage: rsync-ssl --HELPER HOSTNAME rsync --server --daemon ." 1>&2
	exit 1
    fi
    validate_ssl_hostname "$hostname"

if [[ $RSYNC_SSL_TYPE == stunnel && -z ${RSYNC_SSL_CA_CERT+x} && "$RSYNC_SSL_ALLOW_INSECURE_STUNNEL" != 1 ]]; then
	echo "stunnel requires RSYNC_SSL_CA_CERT for server certificate validation (or set RSYNC_SSL_ALLOW_INSECURE_STUNNEL=1 to opt out)" 1>&2
	exit 1
    fi

# Bind the server certificate to the requested host (openssl -verify_hostname,
    # stunnel checkHost) so a cert that is CA-valid for a *different* name can't be
    # used to MITM. Set RSYNC_SSL_SKIP_HOSTNAME_CHECK=1 to keep CA chain
    # verification but skip the identity check (e.g. bare-IP or internal-CA setups).
    # checkHost only applies while the chain is being verified.
    openssl_host_opt="-verify_hostname $hostname"
    stunnel_host_opt=""
    [[ "$verify" == "verifyChain = yes" ]] && stunnel_host_opt="checkHost = $hostname"
    if [[ "$RSYNC_SSL_SKIP_HOSTNAME_CHECK" == 1 ]]; then
	openssl_host_opt=""
	stunnel_host_opt=""
    fi

if [[ $RSYNC_SSL_TYPE == gnutls && -z ${RSYNC_SSL_CA_CERT+x} && "$RSYNC_SSL_ALLOW_INSECURE_GNUTLS" != 1 ]]; then
	echo "gnutls-cli requires RSYNC_SSL_CA_CERT for server certificate validation (or set RSYNC_SSL_ALLOW_INSECURE_GNUTLS=1 to opt out)" 1>&2
	exit 1
    fi

if [[ $RSYNC_SSL_TYPE == openssl ]]; then
	exec "$RSYNC_SSL_OPENSSL" s_client $caopt $certopt $keyopt -quiet -verify_quiet -servername $hostname $openssl_host_opt -connect $hostname:$port
    elif [[ $RSYNC_SSL_TYPE == gnutls ]]; then
	exec "$RSYNC_SSL_GNUTLS" --logfile=/dev/null $gnutls_cert_opt $gnutls_key_opt $gnutls_opts $hostname:$port
    else
	# devzero@web.de came up with this no-tmpfile calling syntax:
	exec "$RSYNC_SSL_STUNNEL" -fd 10 11<&0 <<EOF 10<&0 0<&11 11<&-
foreground = yes
debug = crit
connect = $hostname:$port
client = yes
TIMEOUTclose = 0
$verify
$stunnel_host_opt
$certopt
$cafile
EOF
    fi
}

function validate_ssl_hostname {
    local host="$1"
    if [[ -z "$host" || "$host" == -* || "$host" =~ [^A-Za-z0-9._:-] ]]; then
	echo "invalid rsync-ssl hostname: $host" 1>&2
	exit 1
    fi
}

function path_search {
    IFS_SAVE="$IFS"
    IFS=:
    for prog in "${@}"; do
	for dir in $PATH; do
	    [[ -z "$dir" ]] && dir=.
	    if [[ -f "$dir/$prog" && -x "$dir/$prog" ]]; then
		echo "$dir/$prog"
		IFS="$IFS_SAVE"
		return 0
	    fi
	done
    done

IFS="$IFS_SAVE"
    echo "Failed to find on your path: $*" 1>&2
    echo "See the rsync-ssl manpage for configuration assistance." 1>&2
    return 1
}

if [[ "$#" == 0 ]]; then
    echo "Usage: rsync-ssl [--type=SSL_TYPE] RSYNC_ARG [...]" 1>&2
    echo "The SSL_TYPE can be openssl or stunnel"
    exit 1
fi

if [[ "$1" = --help || "$1" = -h ]]; then
    exec rsync --help
fi

if [[ "$1" == --HELPER ]]; then
    shift
    rsync_ssl_helper "${@}"
fi

if [[ "$1" == --type=* ]]; then
    export RSYNC_SSL_TYPE="${1/--type=/}"
    shift
fi

rsync_ssl_run "${@}"