[ntp:hackers] SHA1 for symmetric keys?

Harlan Stenn stenn at ntp.org
Thu Dec 10 18:06:26 UTC 2015


Hal Murray writes:
> 
> brian.utterback at oracle.com said:
> > Does ntpd support SHA1 for symmetric keys? Looking at the docs it suggests
> > that the ntp.keys file should be generated with ntp-keygen rather than by
> > manual editing. Running ntp-keygen creates a file with both MD5 and SHA1
> > keys, but when I try to use them ntpd says "invalid key type" for all of th
> e
> > SHA1 keys. Not to mention I never heard anyone say not to edit the ntp.keys
> > file by hand. Am I misunderstanding the whole thing? 
> 
> I don't know of any reason why you can't edit your keys file by hand.  (There
>  
> are plenty of ways to screw it up, but that's a different issue.)
> 
> SHA1symmetric keys  do work, but it requires a library.  I have a test case 
> working after configuring with --with-crypto

I don't think you have submitted this test case yet.

Are you planning to submit it?

H


More information about the hackers mailing list