1*4882a593SmuzhiyunFrom c3f7414c450faaf6a8281cc4a4403529aeb7d859 Mon Sep 17 00:00:00 2001 2*4882a593SmuzhiyunFrom: Matt McCutchen <matt@mattmccutchen.net> 3*4882a593SmuzhiyunDate: Wed, 26 Aug 2020 12:16:08 -0400 4*4882a593SmuzhiyunSubject: [PATCH] rsync-ssl: Verify the hostname in the certificate when using 5*4882a593Smuzhiyun openssl. 6*4882a593Smuzhiyun 7*4882a593SmuzhiyunSigned-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> 8*4882a593Smuzhiyun[Retrieved from: 9*4882a593Smuzhiyunhttps://git.samba.org/?p=rsync.git;a=commitdiff;h=c3f7414c450faaf6a8281cc4a4403529aeb7d859] 10*4882a593Smuzhiyun--- 11*4882a593Smuzhiyun rsync-ssl | 2 +- 12*4882a593Smuzhiyun 1 file changed, 1 insertion(+), 1 deletion(-) 13*4882a593Smuzhiyun 14*4882a593Smuzhiyundiff --git a/rsync-ssl b/rsync-ssl 15*4882a593Smuzhiyunindex 8101975a..46701af1 100755 16*4882a593Smuzhiyun--- a/rsync-ssl 17*4882a593Smuzhiyun+++ b/rsync-ssl 18*4882a593Smuzhiyun@@ -129,7 +129,7 @@ function rsync_ssl_helper { 19*4882a593Smuzhiyun fi 20*4882a593Smuzhiyun 21*4882a593Smuzhiyun if [[ $RSYNC_SSL_TYPE == openssl ]]; then 22*4882a593Smuzhiyun- exec $RSYNC_SSL_OPENSSL s_client $caopt $certopt -quiet -verify_quiet -servername $hostname -connect $hostname:$port 23*4882a593Smuzhiyun+ exec $RSYNC_SSL_OPENSSL s_client $caopt $certopt -quiet -verify_quiet -servername $hostname -verify_hostname $hostname -connect $hostname:$port 24*4882a593Smuzhiyun elif [[ $RSYNC_SSL_TYPE == gnutls ]]; then 25*4882a593Smuzhiyun exec $RSYNC_SSL_GNUTLS --logfile=/dev/null $gnutls_cert_opt $gnutls_opts $hostname:$port 26*4882a593Smuzhiyun else 27*4882a593Smuzhiyun-- 28*4882a593Smuzhiyun2.25.1 29*4882a593Smuzhiyun 30