OS Manuals

/opt/chainguard/duplicity/bin/tls.py

Encrypted backup using rsync algorithm

From duplicity 3.2.2-r5 (enterprise-packages), captured 2026-11-08 by running tls.py --help (exit 255) · terse output. permalink

ERROR: Unknown command: --help

Version: 0.8.2

RNG: os.urandom

Modules:
  tackpy      : Not Loaded
  M2Crypto    : Not Loaded
  pycrypto    : Not Loaded
  GMPY        : Not Loaded
  GMPY2       : Not Loaded
  Kyber-py    : Not Loaded

Certificate compression algorithms:
  zlib compress      : Loaded
  zlib decompress    : Loaded
  brotli compress    : Not Loaded
  brotli decompress  : Not Loaded
  zstd decompress    : Not Loaded
  zstd decompress    : Not Loaded

Commands:

  server
    [-c CERT] [-k KEY] [-t TACK] [-v VERIFIERDB] [-d DIR] [-l LABEL] [-L LENGTH]
    [--reqcert] [--param DHFILE] [--psk PSK] [--psk-ident IDENTITY]
    [--psk-sha384] [--ssl3] [--max-ver VER] [--tickets COUNT] [--cipherlist]
    [--request-pha] [--require-pha] [--echo] [--groups GROUPS]
    HOST:PORT

  client
    [-c CERT] [-k KEY] [-u USER] [-p PASS] [-l LABEL] [-L LENGTH] [-a ALPN]
    [--psk PSK] [--psk-ident IDENTITY] [--psk-sha384] [--resumption] [--ssl3]
    [--max-ver VER] [--cipherlist]
    HOST:PORT

  LABEL - TLS exporter label
  LENGTH - amount of info to export using TLS exporter
  ALPN - name of protocol for ALPN negotiation, can be present multiple times
         in client to specify multiple protocols supported
  DHFILE - file that includes Diffie-Hellman parameters to be used with DHE
           key exchange
  PSK - hex encoded (without starting 0x) shared key to be used for connection
  IDENTITY - name associated with the PSK key
  --ssl3 - enable support for SSLv3
  VER - TLS version as a string, "ssl3", "tls1.0", "tls1.1", "tls1.2" or
        "tls1.3"
  --tickets COUNT - how many tickets should server send after handshake is
                    finished
  --cipherlist - comma separated ciphers to enable. For ex. aes128ccm,3des
                 You can specify this option multiple times.
  --request-pha - ask client for post-handshake authentication
  --require-pha - abort connection if client didn't provide certificate in
                  post-handshake authentication
  --echo - function as an echo server
  --groups - specify what key exchange groups should be supported
  GROUPS - comma-separated list of enabled key exchange groups
  CERT, KEY - the file with key and certificates that will be used by client or
        server. The server can accept multiple pairs of `-c` and `-k` options
        to configure different certificates (like RSA and ECDSA)

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.