1From c3f7414c450faaf6a8281cc4a4403529aeb7d859 Mon Sep 17 00:00:00 2001
2From: Matt McCutchen <matt@mattmccutchen.net>
3Date: Wed, 26 Aug 2020 12:16:08 -0400
4Subject: [PATCH] rsync-ssl: Verify the hostname in the certificate when using
5 openssl.
6
7Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
8[Retrieved from:
9https://git.samba.org/?p=rsync.git;a=commitdiff;h=c3f7414c450faaf6a8281cc4a4403529aeb7d859]
10---
11 rsync-ssl | 2 +-
12 1 file changed, 1 insertion(+), 1 deletion(-)
13
14diff --git a/rsync-ssl b/rsync-ssl
15index 8101975a..46701af1 100755
16--- a/rsync-ssl
17+++ b/rsync-ssl
18@@ -129,7 +129,7 @@ function rsync_ssl_helper {
19     fi
20
21     if [[ $RSYNC_SSL_TYPE == openssl ]]; then
22-	exec $RSYNC_SSL_OPENSSL s_client $caopt $certopt -quiet -verify_quiet -servername $hostname -connect $hostname:$port
23+	exec $RSYNC_SSL_OPENSSL s_client $caopt $certopt -quiet -verify_quiet -servername $hostname -verify_hostname $hostname -connect $hostname:$port
24     elif [[ $RSYNC_SSL_TYPE == gnutls ]]; then
25 	exec $RSYNC_SSL_GNUTLS --logfile=/dev/null $gnutls_cert_opt $gnutls_opts $hostname:$port
26     else
27--
282.25.1
29
30