Yo Hal!

On Wed, 20 Mar 2019 12:10:25 -0700
Hal Murray via devel <devel@ntpsec.org> wrote:

> Gary said:
> > I' waiting for Gentoo to have the required openssl version.  
> 
> It should work -- unless Gentoo is using something really
> pre-historic.

Ah, Gentoo unstable updated to openssl 1.1.0j on March 6th.

Do I need any change in basic NTPsec build?

> [New cookie timer set to an hour rather than a day.]
> > What I am worried bout is inrush to the NTS-KE server.
> > ...  
> 
> No problem.  Old cookies work for another cycle.

OK, but they still time out all at once, on the "another cycle".

> So if the polling
> interval is faster than 3600/8 they work without any extra NTS-KE.

Uh, lost me...

> The hour is only a hack for debugging.  We will set it to a day
> before release.

Only if you figure out how to not have a huge daily rush to rekey.

RGDS
GARY
---------------------------------------------------------------------------
Gary E. Miller Rellim 109 NW Wilmington Ave., Suite E, Bend, OR 97703
        g...@rellim.com  Tel:+1 541 382 8588

            Veritas liberabit vos. -- Quid est veritas?
    "If you can’t measure it, you can’t improve it." - Lord Kelvin

Attachment: pgpB9cDQqpsS6.pgp
Description: OpenPGP digital signature

_______________________________________________
devel mailing list
devel@ntpsec.org
http://lists.ntpsec.org/mailman/listinfo/devel

Reply via email to