Yo Richard! On Fri, 08 Feb 2019 00:26:27 +0000 Matt Selsky via vc <v...@ntpsec.org> wrote:
> dc2827a3 by Richard Laager at 2019-02-07T18:42:59Z
> nts.adoc: Make AEAD_AES_SIV_CMAC_256 not implicit
>
> If the user specifies a NTPCipherSuite string, they need to include
> AEAD_AES_SIV_CMAC_256 if they want it. Otherwise, if it is implicit,
> as the document previous said, this would preclude the user from
> disabling AEAD_AES_SIV_CMAC_256 in the future, should that become
> necessary.
The traditional way that OpenSSL, and its users (Apache, nginx, postfix,
sendmail, etc.) hand this is with the "!" operator.
Then you can do things, like:
NTPCipherSuite "HIGH:!AEAD_AES_SIV_CMAC_256"
RGDS
GARY
---------------------------------------------------------------------------
Gary E. Miller Rellim 109 NW Wilmington Ave., Suite E, Bend, OR 97703
g...@rellim.com Tel:+1 541 382 8588
Veritas liberabit vos. -- Quid est veritas?
"If you can’t measure it, you can’t improve it." - Lord Kelvin
pgpYp5Y2WbuGZ.pgp
Description: OpenPGP digital signature
_______________________________________________ devel mailing list devel@ntpsec.org http://lists.ntpsec.org/mailman/listinfo/devel
