Re: rsync & SSL 'for real'

2007-04-21 Thread Jamie Lokier
Andreas Kotes wrote: > > >> There is no license issue. > > There would be a serious licence issue the other way round, but BSD is a > tad more permissive than the GPL is, so - no problem there BUT: there is > an advertisement clause, so rsync would need to display certain messages > when compiled

Re: rsync & SSL 'for real'

2007-04-19 Thread Lawrence D. Dunn
Carson, My mistake- read "SSL", immediately started thinking "ssh", and issues there. No excuse. So- my comments aren't applicable to the SSL-for-real discussion - apologies to the list. (Aside: the issues with ssh are not about modifying TCP buffers. They are about a fixed-size ssh-

Re: rsync & SSL 'for real'

2007-04-18 Thread Aaron W Morris
On 4/18/07, Andreas Kotes <[EMAIL PROTECTED]> wrote: > >> This is just a troll. just who exactly are you talking about? ;) Ahem... That would be me. That will be $10 for posting in this list. :-) -- Aaron W Morris (decep) -- To unsubscribe or change options: https://lists.samba.org/mailman/

Re: rsync & SSL 'for real'

2007-04-18 Thread Andreas Kotes
Hello, * Aaron W Morris <[EMAIL PROTECTED]> [20070419 02:25]: > >>> This still applies (depending on the ssl toolkit being used). The > >>> problem referenced here is the TCP window size is hard coded inside > >>> the openssl library. In order to change the window size, one must > >>> patch open

Re: rsync & SSL 'for real'

2007-04-18 Thread Aaron W Morris
>> This still applies (depending on the ssl toolkit being used). The >> problem referenced here is the TCP window size is hard coded inside >> the openssl library. In order to change the window size, one must >> patch openssl. > > TCP window size is not, and can not, be hard coded inside openssl

Re: rsync & SSL 'for real'

2007-04-18 Thread gregorcy
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 that was a little harsh Carson Gaspar wrote: > Aaron W Morris wrote: >> On 4/18/07, Carson Gaspar <[EMAIL PROTECTED]> wrote: >>> Lawrence D. Dunn wrote: >>> > Colleagues, >>> > If you do pursue SSL functionality directly in rsync, >>> > please be

Re: rsync & SSL 'for real'

2007-04-18 Thread Carson Gaspar
Aaron W Morris wrote: On 4/18/07, Carson Gaspar <[EMAIL PROTECTED]> wrote: Lawrence D. Dunn wrote: > Colleagues, > If you do pursue SSL functionality directly in rsync, > please be sure to take a look at Chris Rapier's work > to "fix" standard ssh implementations, at: > http://www.psc.ed

Re: rsync & SSL 'for real'

2007-04-18 Thread Aaron W Morris
On 4/18/07, Carson Gaspar <[EMAIL PROTECTED]> wrote: Lawrence D. Dunn wrote: > Colleagues, > If you do pursue SSL functionality directly in rsync, > please be sure to take a look at Chris Rapier's work > to "fix" standard ssh implementations, at: > http://www.psc.edu/networking/projects/h

Re: rsync & SSL 'for real'

2007-04-18 Thread Carson Gaspar
Lawrence D. Dunn wrote: Colleagues, If you do pursue SSL functionality directly in rsync, please be sure to take a look at Chris Rapier's work to "fix" standard ssh implementations, at: http://www.psc.edu/networking/projects/hpn-ssh/ Turns out "-e ssh" using most libraries puts a fixed

Re: rsync & SSL 'for real'

2007-04-18 Thread Lawrence D. Dunn
Colleagues, If you do pursue SSL functionality directly in rsync, please be sure to take a look at Chris Rapier's work to "fix" standard ssh implementations, at: http://www.psc.edu/networking/projects/hpn-ssh/ Turns out "-e ssh" using most libraries puts a fixed-window-size ssh-windowi

Re: rsync & SSL 'for real'

2007-04-17 Thread Wayne Davison
On Tue, Apr 17, 2007 at 12:52:57PM +0200, Andreas Kotes wrote: > I'd be willing to put up the effort to add full (or at least better) > SSL support direclty to rsync if the maintainers would agree with it, > and would seriously consider including it in the main source in the > long run. I'd be int

rsync & SSL 'for real'

2007-04-17 Thread Andreas Kotes
Dear All, I've been using rsync with stunnel with success for a while now, but I'm not necessarily satisfied with it, i.e. having an extra layer externally and all, no authentication against SSL-subjects .. I had a look at the patch included with the source, and it doesn't quite address everythin

Re: rsync + SSL

2002-10-13 Thread Derek Simkowiak
> if anyone has tried this before? Is it un-doable for one reason or another? It's been done for some time. See 'stunnel' at Google. -- To unsubscribe or change options: http://lists.samba.org/mailman/listinfo/rsync Before posting, read: http://www.tuxedo.org/~esr/faqs/smart-questions.

Re: Re: rsync + SSL

2002-10-13 Thread Bruno Ferreira
>On Mon, 14 Oct 2002 09:17, Justin Banks wrote: >> Hello - >> I'd like to encrypt rsync traffic over the wire, and for various >> reasons, I can't use ssh. I'd like to use SSL. Having spent the last day or >> so trying to wrap my brain around what that's going to take, I'm wondering >> if any

Re: rsync + SSL

2002-10-13 Thread Brad Hards
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Mon, 14 Oct 2002 09:17, Justin Banks wrote: > Hello - > I'd like to encrypt rsync traffic over the wire, and for various > reasons, I can't use ssh. I'd like to use SSL. Having spent the last day or > so trying to wrap my brain around what th

rsync + SSL

2002-10-13 Thread Justin Banks
Hello - I'd like to encrypt rsync traffic over the wire, and for various reasons, I can't use ssh. I'd like to use SSL. Having spent the last day or so trying to wrap my brain around what that's going to take, I'm wondering if anyone has tried this before? Is it un-doable for one reason or