Name
Securely downloading files with scp is aimed primarily at advanced users who are using ssh and the command line regularly in either macOS X, bsd, or linux. For those with adequate command line experience, using ssh and scp to download remote files is easy and, conveniently, after the file transfer has completed, the remote connection will end. I have a file which is an executable sitting on the server. When I just use scp to copy it down to my desktop which is a mac i get bash -./fig up cannot execute binary file. I believe this is because it came from linux, and now I am trying to run it on a mac terminal.
sx, sb, sz - XMODEM, YMODEM, ZMODEM file send
Synopsis
sz [-+8abdefkLlNnopqTtuvyY] file ...
sb [-adfkqtuv] file ...
sx [-akqtuv] file
sz [-oqtv] -c COMMAND
sz [-oqtv] -i COMMAND
sz -TT
Description
Sz uses the ZMODEM, YMODEM or XMODEM error correcting protocol to send one or more files over a dial-in serial port to a variety of programs runningunder PC-DOS, CP/M, Unix, VMS, and other operating systems.
While rz is smart enough to be called from cu(1), very few versions of cu(1) are smart enough to allow sz to work properly. Unixflavors of Professional-YAM are available for such dial-out application.
Sz sends one or more files with ZMODEM protocol.
ZMODEM greatly simplifies file transfers compared to XMODEM. In addition to a friendly user interface, ZMODEM provides Personal Computer and other users anefficient, accurate, and robust file transfer method.
ZMODEM provides complete END-TO-END data integrity between application programs. ZMODEM's 32 bit CRC catches errors that sneak into even the mostadvanced networks.
Advanced file management features include AutoDownload (Automatic file Download initiated without user intervention), Display of individual and total filelengths and transmission time estimates, Crash Recovery, selective file transfers, and preservation of exact file date and length.
Output from another program may be piped to sz for transmission by denoting standard input with '-':
ls -l | sz -
The program output is transmitted with the filename sPID.sz where PID is the process ID of the sz program. If the environment variable ONAMEis set, that is used instead. In this case, the Unix command:
ls -l | ONAME=con sz -ay -
will send a 'file' to the PC-DOS console display. The -y option instructs the receiver to open the file for writing unconditionally. The -aoption causes the receiver to convert Unix newlines to PC-DOS carriage returns and linefeeds.
Sb batch sends one or more files with YMODEM or ZMODEM protocol. The initial ZMODEM initialization is not sent. When requested by the receiver,sb supports YMODEM-g with 'cbreak' tty mode, XON/XOFF flow control, and interrupt character set to CAN (^X). YMODEM-g (Professional-YAMg option) increases throughput over error free channels (direct connection, X.PC, etc.) by not acknowledging each transmitted sector.
On Unix systems, additional information about the file is transmitted. If the receiving program uses this information, the transmitted filelength controls the exact number of bytes written to the output dataset, and the modify time and file mode are set accordingly.
Sx sends a single file with XMODEM or XMODEM-1k protocol (sometimes incorrectly called 'ymodem'). The user must supply the filename to both sending and receiving programs.
If sz is invoked with $SHELL set and iff that variable contains the string rsh , rbash or rksh (restricted shell), szoperates in restricted mode. Restricted mode restricts pathnames to the current directory and PUBDIR (usually /usr/spool/uucppublic) and/or subdirectoriesthereof.
The fourth form sends a single COMMAND to a ZMODEM receiver for execution. Sz exits with the COMMAND return value. If COMMAND includes spaces orcharacters special to the shell, it must be quoted.
The fifth form sends a single COMMAND to a ZMODEM receiver for execution. Sz exits as soon as the receiver has correctly received the command, beforeit is executed.
The sixth form (sz -TT) attempts to output all 256 code combinations to the terminal. In you are having difficulty sending files, this command lets you seewhich character codes are being eaten by the operating system.
If sz is invoked with stdout and stderr to different datasets, Verbose is set to 2, causing frame by frame progress reports to stderr. This may bedisabled with the q option.
The meanings of the available options are:
Using this option turns of memory mapping of the input file. This increases memory and cpu usage.
This option enables the --full-path option.
This is also turned on with to --dot-to-slash option.
Use this option with care.
Download A File In Linux
enable timesync protocol support. See timesync.doc for further information.This option is incompatible with standard zmodem. Use it with care.
Try to initiate a TCP/IP connection. lsz will ask the receiving zmodem to open a TCP/IP connection. All handshaking (which address / port to use) will bedone by the zmodem programs.
You will normally not want to use this option as lrzsz is the only zmodem which understands what to do (private extension). You might want to use thisoption if the two programs are connected (stdin/out) over a slow or bad (not 8bit clean) network connection.Use of this option imposes a security risk, somebody else could connect to the port in between. See SECURITY for details.
See --tcp-server for more information.
You will normally not want to use this option as lrzsz is the only zmodem which understands what to do (private extension). You might want to use this ifyou have to use zmodem (for which reason whatever), and cannot use the --tcp option of lsz (perhaps because your telnet doesn't allow to spawn alocal program with stdin/stdout connected to the remote side).
If you use this option you have to start lsz with the --tcp-client ADDRESS:PORT option. lrz will print the address and port on startup.
Use of this option imposes a security risk, somebody else could connect to the port in between. See SECURITY for details.
-uUnlink the file after successful transmission.
Security
Restricted mode restricts pathnames to the current directory and PUBDIR (usually /var/spool/uucppublic) and/or subdirectories thereof, and disables remotecommand execution.
Restricted mode is entered if the R option is given or if lsz detects that it runs under a restricted shell or if the environment variableZMODEM_RESTRICTED is found.
Restricted mode can be turned of with the U option if not running under a restricted shell.
Environment
ZNULLSmay be used to specify the number of nulls to send before a ZDATA frame.
SHELL
lsz recognizes a restricted shell if this variable includes rsh or rksh
If this environment variable is set its content is used as the directory to place in the answer file to a timesync request. TMP Used insteadof TMPDIR if TMPDIR is not set. If neither TMPDIR nor TMP is set /tmp will be used.
Examples
ZMODEM File Transfer (Unix to DSZ/ZCOMM/Professional-YAM)
% sz -a *.c
This single command transfers all .c files in the current Unix directory with conversion (-a) to end of line conventions appropriate to the receivingenvironment. With ZMODEM AutoDownload enabled, Professional-YAM and ZCOMM will automatically recieve the files after performing a security check.
% sz -Yan *.c *.h
Send only the .c and .h files that exist on both systems, and are newer on the sending system than the corresponding version on the receiving system,converting Unix to DOS text format.
$ sz -Yan file1.c file2.c file3.c foo.h baz.h ®(for VMS)
ZMODEM Command Download (Unix to Professional-YAM)
cpszall:all sz -c 'c:;cd /yam/dist' sz -ya $(YD)/*.me sz -yqb y*.exe sz -c 'cd /yam' sz -i '!insms'
This Makefile fragment uses sz to issue commands to Professional-YAM to change current disk and directory. Next, sz transfers the .mefiles from the $YD directory, commanding the receiver to overwrite the old files and to convert from Unix end of line conventions to PC-DOS conventions. Thethird line transfers some .exe files. The fourth and fifth lines command Pro-YAM to change directory and execute a PC-DOS batch file insms .Since the batch file takes considerable time, the -i form is used to allow sz to exit immediately.
XMODEM File Transfer (Unix to Crosstalk)
% sx -a foo.c
ESC
rx foo.c
The above three commands transfer a single file from Unix to a PC and Crosstalk with sz translating Unix newlines to DOS CR/LF. This combination is muchslower and far less reliable than ZMODEM.
Error Messages
'Caught signal 99' indicates the program was not properly compiled, refer to 'bibi(99)' in rbsb.c for details.
See Also
rz(omen), ZMODEM.DOC, YMODEM.DOC, Professional-YAM, crc(omen), sq(omen), todos(omen), tocpm(omen), tomac(omen), yam(omen)
Compile time options required for various operating systems are described in the source file.
Vms Version
The VMS version does not support wild cards. Because of VMS DCL, upper case option letters muse be represented by proceding the letter.
The current VMS version does not support XMODEM, XMODEM-1k, or YMODEM.
VMS C Standard I/O and RMS may interact to modify the file contents.
Files
32 bit CRC code courtesy Gary S. Brown.
sz.c, crctab.c, rbsb.c, zm.c, zmodem.h Unix source files
sz.c, crctab.c, vrzsz.c, zm.c, zmodem.h, vmodem.h, vvmodem.c, VMS source files.
/tmp/szlog stores debugging output (sz -vv) (szlog on VMS).
Testing Feature
The command 'sz -T file' exercises the Attn sequence error recovery by commanding errors with unterminated packets. The receiving program shouldcomplain five times about binary data packets being too long. Each time sz is interrupted, it should send a ZDATA header followed by another defectivepacket. If the receiver does not detect five long data packets, the Attn sequence is not interrupting the sender, and the Myattn string insz.c must be modified.
After 5 packets, sz stops the 'transfer' and prints the total number of characters 'sent' (Tcount). The difference between Tcount and 5120 representsthe number of characters stored in various buffers when the Attn sequence is generated.
Bugs
Calling sz from most versions of cu(1) doesn't work because cu's receive process fights sz for characters from the modem.
On at least one BSD system, sz would hang or exit when it got within a few kilobytes of the end of file. Using the '-w 8192' flag fixed the problem. Thereal cause is unknown, perhaps a bug in the kernel TTY output routines.
Programs that do not properly implement the specified file transfer protocol may cause sz to 'hang' the port for a minute or two. This problem iscorrected by using ZCOMM, Pro-YAM, or other program with a correct implementation of the specified protocol.
Many programs claiming to support YMODEM only support XMODEM with 1k blocks, and they often don't get that quite right.
XMODEM transfers add up to 127 garbage bytes per file. XMODEM-1k and YMODEM-1k transfers use 128 byte blocks to avoid extra padding.
YMODEM programs use the file length transmitted at the beginning of the transfer to prune the file to the correct length; this may cause problems withsource files that grow during the course of the transfer. This problem does not pertain to ZMODEM transfers, which preserve the exact file lengthunconditionally.
Most ZMODEM options are merely passed to the receiving program; some do not implement all these options.
Circular buffering and a ZMODEM sliding window should be used when input is from pipes instead of acknowledging frames each 1024 bytes. If no files can beopened, sz sends a ZMODEM command to echo a suitable complaint; perhaps it should check for the presence of at least one accessible file before gettinghot and bothered. The test mode leaves a zero length file on the receiving system.
A few high speed modems have a firmware bug that drops characters when the direction of high speed transmissson is reversed. The environment variable ZNULLSmay be used to specify the number of nulls to send before a ZDATA frame. Values of 101 for a 4.77 mHz PC and 124 for an AT are typical.
Referenced By
picocom(8),ztelnet(1)Someday you may need to get the SSL certificate of a website and save it locally.
For example, you could get an error saying that you can’t clone a Git repository due to a self-signed certificate and to resolve this issue you would need to download the SSL certificate and make it trusted by your Git client.
In the following article i am showing how to export the SSL certificate from a server (site URL) using Google Chrome, Mozilla Firefox and Internet Explorer browsers as well as how to get SSL certificate from the command line, using openssl
command.
Cool Tip: Create a self-signed SSL Certificate! Read more →
Export SSL Certificate
Google Chrome
Export the SSL certificate of a website using Google Chrome:
- Click the
Secure
button (a padlock) in an address bar - Click the
Show certificate
button - Go to the
Details
tab - Click the
Export
button - Specify the name of the file you want to save the SSL certificate to, keep the “Base64-encoded ASCII, single certificate” format and click the
Save
button
Mozilla Firefox
Export the SSL certificate of a website using Mozilla Firefox:
Download File From Linux Server To Mac Download
- Click the
Site Identity
button (a padlock) in an address bar - Click the
Show connection details
arrow - Click the
More Information
button - Click the
View Certificate
button - Go to the
Details
tab - Click the
Export
button - Specify the name of the file you want to save the SSL certificate to, keep the “X.509 Certificate (PEM)” format and click the
Save
button
Cool Tip: Check the expiration date of the SSL Certificate from the Linux command line! The fastest way! Read more →
Internet Explorer
Download and save the SSL certificate of a website using Internet Explorer:
- Click the
Security report
button (a padlock) in an address bar - Click the
View Certificate
button - Go to the
Details
tab - Click the
Copy to File...
button - Click the
Next
button - Select the “Base-64 encoded X.509 (.CER)” format and click the
Next
button - Specify the name of the file you want to save the SSL certificate to
- Click the
Next
and theFinish
buttons
OpenSSL
Get the SSL certificate of a website using openssl
command:
Short explanation:
Option | Description |
---|---|
-connect HOST:PORT | The host and port to connect to |
-servername NAME | The TLS SNI (Server Name Indication) extension (website) |
certificate.crt | Save SSL certificate to this file |
Example: