![[BACK]](/icons/back.gif){kind=icon}
Up to [cvs.NetBSD.org] / pkgsrc / time / ntpsec
Request diff between arbitrary revisions
Keyword substitution: kv
Default branch: MAIN
ntpsec: updated to 1.2.3 1.2.3 * Change mode6 alignment to four, which may break some compatibility with classic NTP. * Seccomp should now also yield invalid syscall names when dying. * Make ntpq stop dropping output timestamp leading zeroes. * Update documents in quite a few places. * Reset some stats hourly, even when not logged into files. * Add error logging, and stats for ms-sntp. * Add spacing between multiple peer views in ntpq. * We think we have fixed ms-sntp but we can't test it. If you can test it, please let us know if it does/doesn't work. * ntpd and ntpq both treat SHA-1 as an alias for SHA1 NIST uses SHA-1. The crypto package from OpenSSL uses SHA1. * The default crypto type for ntpq is now AES. RFC 8573 deprecated MD5. * There are now log files with hourly statistics for NTS and NTS-KE traffic: filegen ntsstats and filegen ntskestats, * Update ntpsnmpd to use python built-in to get uname information. * Update license file names for REUSE compliance. * Fix ntploggps issue where count_used_satellites checked before it is initialized. * Print out OpenSSL version at configure time. * Enable debug symbols by default, with only an option to disable. * Add support for ecdhcurves list. * Fix build on platforms where `-fstack-protector` relies on libssp, like musl. * Fix ntpdig crash when using 2.ntp.pool.org with a host without IPv6 support. * Do not install libaes_siv test anymore. * Add update option to buildprep. * ntpdig shows packet delay in JSON output.
ntpsec: update to 1.2.1 2021-06-06: 1.2.1 Update ntpkeygen/keygone to properly filter # characters. (CVE-2021-22212) Add dextral peers mode in ntpq and ntpmon. Drop NTPv1 as the support was not RFC compliant, maybe v2 except mode 6 next. Fix argument P for ntpd parsing fixed and ntpdate improvements. Fix crash for raw ntpq readvar. Add processor usage to NTS-KE logging except on NetBSD. The build epoch has been replaced with a hardcoded timestamp which will be manually updated every nine years or so (approx 512w). This makes the binaries reproducible by default. Compare versions of ntp.ntpc and libntpc printing a warning if mismatched. Fix libntpc install path if using it. Reduce maxclocks default to 5 to reduce the NTP pool load. Print LIBDIR during ./waf configure. Add documentation, new GPG key, and other cleanups. 2020-10-06: 1.2.0 The minor version bump is to indicate official official support of RFC8915 "Network Time Security for the Network Time Protocol" which was released 2020-09-30. NTS-KE client now defaults to port 4460. NTS-KE server now listens on port 4460. (Listening on port 123 has been removed.) The shebang of installed Python scripts can now be customized with: waf configure --pyshebang="..." NTP clients now use a shared library with Python instead of an extension. Add flakiness option to ntpq and fixed limit=1 in mrulist. Fixed a minor formatting issue in rate page.
time: Replace RMD160 checksums with BLAKE2s checksums All checksums have been double-checked against existing RMD160 and SHA512 hashes
time: Remove SHA1 hashes for distfiles
ntpsec: update to 1.1.9 == 2020-05-23: 1.1.9 == Correctly parse ntpq :config output on Python 3 and check return MACs. Add AES and other algorithm support to ntpq and ntpdig, from OpenSSL. Remove support for NetInfo. NetInfo was last supported in Mac OS X v10.4 The configure step now supports --disable-nts for running on systems with older versions of OpenSSL. The default restrictions now start with noquery and limited to reduce the opportunities for being used for DDoS-ing. The draft RFC for NTS has dropped support for TLSv1.2 We now need OpenSSL with TLSv1.3 support (version 1.1.1 or newer). The config keyword +tlsciphers+ has been removed. Additional filtering and sort options have been added to ntpq/mrulist Details are in the man page. Rate limiting has been cleaned up. With "restrict limited", traffic is now limited to an average of 1 packet per second with bursts of 20. (needs doc and maybe config) SIGHUP and hourly checks have been unified. Both now check for a new log file check for a new certificate file check for a new leap file SIGHUP also restarts all pending DNS and NTS probes. NTS client now requires ALPN on TLSv1.3. asciidoctor (1.5.8 or newer) is now supported and is the preferred AsciiDoc processor. asciidoc is still supported, but the minimum supported version has been raised from 8.6.0 to 8.6.8. asciidoc3 (3.0.2 or newer) is also supported. HTML docs are now built by default if an AsciiDoc processor is installed. If you do not want HTML docs, configure with --disable-doc. (Note: Man pages are controlled by a separate --disable-manpage.) Analysis shows that CVE-2020-11868, affecting NTP Classic, cannot affect us, as the peer mode involved has been removed. == 2019-11-17: 1.1.8 == Fix bug in NTS-KE client so that NTP server names work. Fix/tweak several NTS logging messages. == 2019-09-02: 1.1.7 == The numeric literal argument of the 'time1' fudge option on a clock can now have one or more letter suffixes that compensate for era rollover in a GPS device. Each "g" adds the number of seconds in a 1024-week (10-bit) GPS era. Each "G" adds the number of seconds in a 8192-week (13-bit) GPS era. The neoclock4x driver has been removed, due to the hardware and the vendor having utterly vanished from the face of the earth. The NTS ALPN negotiation sequence has been modified for improved interoperability with other NTS implementations. NTS key rotation now happens every 24 hours. It used to rotate every hour to enable testing of recovery from stale cookies. == 2019-07-10: 1.1.6 == Fixes to code quality checks. Fixes to NTS server list. Fix to bug #600. == 2019-06-30: 1.1.5 == Add ALPN for the NTS server, as required by the NTP draft. Revert some ntpq behavior. == 2019-06-21: 1.1.4 == NTS is now implemented. See .../devel/nts.adoc https://tools.ietf.org/html/draft-ietf-ntp-using-nts-for-ntp We thank Cisco for sponsoring the NTS development. Lots of fixes and cleanups to PPS, both implementation and documentation. Pthread support is now required. --disable-dns-lookup is gone. NIST lockclock mode is now a runtime option set by the (previously unused) flag1 mode bit of the local-clock driver. As always, lots of minor fixups and cleanups everywhere. See the git log.
ntpsec: import ntpsec-1.1.3 A secure, hardened, and improved implementation of Network Time Protocol derived from NTP Classic, Dave Mills's original.