[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[hackers] A couple of questions about SSL and NTP.

To: hackers@xxxxxxxxxxxxx
Subject: [hackers] A couple of questions about SSL and NTP.
From: Brian Utterback <brian.utterback@xxxxxxxxxx>
Date: Mon, 27 Mar 2023 13:23:25 -0400
Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=oracle.com; dmarc=pass action=none header.from=oracle.com; dkim=pass header.d=oracle.com; arc=none
Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=cLuMHO8ADANtQtqmKlPQKzPioFw/EDl4PEK6041hY5A=; b=lK0DfhrBHxm55bez0DvmLTWJW+9uyyPWSxuQ1FI9m62dxYaGEHpUb2cldQU6YBiTCScEliVY1Vy2sFS5OGMku6C8X5q+dtSb7ooueoffSY61LkGYOpHmlEP4H8fHJ8OAeeYOkubZHUwAtG3SSywjRohVxNeyJauJ/X84fJdR/PrfPhMoprx4DOt1nEjlIMWcGduUqaA+xrm8SRCU62gtk5VjUqi5BYdZhtUbzjz6UTcjlFiJOk/GULNa74U3Eo+8Cxgn/Hr9GXXVUZy7CzPFlNtwYLfCXxXGifcxD+TEdxkafjTfKqfFHzCIkgtQ7ta/9BkQyiyfiqJ4dfsMeoR50Q==
Arc-seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=n78pYo4Nrs3GWdk1KS0wgccdcdBEHPzQ2kIGd6aatdJPCpGCUSAhqmJ9xvwQHKYwQeU1eMis3eJutpu+y+6fXpER5dCJotZ5Hy7Jd3JTz7A7Y+G4+M/7aBhikfmePby3Kzqqvquk9M+uwvYgDIEjKsTETPL05GkXukRKvVbw3rcPa4QEiBQpgmJ2zfwkY7X8gQnZhoot2MU03iNrWwSjZkKNz8iLzn3HrjCPk/S4MjIKVED2Et74VWmbYmCAH6+ytTixR9JC18+dUGg8OBAJQFlb6hn2wvkfH1fGLwqXi3765lk6x1ZVuggKFcVMpvHpvw9UN+hrUlbFZkCTb4gdUg==
Delivered-to: hackers@xxxxxxxxxxxxx
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=oracle.com; h=content-type : message-id : date : to : from : subject : mime-version; s=corp-2022-7-12; bh=cLuMHO8ADANtQtqmKlPQKzPioFw/EDl4PEK6041hY5A=; b=LfAODhza0HiT4ePFda11wqo92aT6Tac2PnL9epvJqPrHmvZ00tJS29KTNuOUwWdOnOrk dCzeX9En1dBxxZusfP+ublsurI76xYxxAIGrF6jSqu2vSBxWqXu6jGd/sVIVDfxHqwOg pJ7NdoKJDxijrq4v2Aiqeh730bfxYZN1xX8bOk8H391GfF6UIY8LJByTsCb8zISZqMbS PUbn0ruT7ZsK5AifTj5nrDTwOLlmsYD63X3XuaWLSNWDKm0EIszNqhp88gng7+vAq+xB HWTlGfDPlyLO4VG0flAzcSXXK42iLXSQM0Q56FA5MJgDJnVyfM8pCTdVA3BvJvSLPjki FA==
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=oracle.onmicrosoft.com; s=selector2-oracle-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=cLuMHO8ADANtQtqmKlPQKzPioFw/EDl4PEK6041hY5A=; b=VoI2byubgcAlmLqFnvKL5LzTN8QXIu1D4aapfTcQv4NUvucgCOl9ZuUZXEcbBFmlHCEL8W/LlrAr+nav38NbDqA/64zETwxa5+m1qSJNYhu2ZO7RQhcIDV/xzsOUdGgsJ/0Y8KDjSZgMICZD5Vt5c1+wCd8xf50VFDxjc71FmWA=
List-unsubscribe: mailto:hackers+unsubscribe@lists.ntp.org
Reply-to: hackers@xxxxxxxxxxxxx
User-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:102.0) Gecko/20100101 Thunderbird/102.9.0

Has there been any progress on converting NTP to use SSLv3? Is there anything I can do to help? Solaris is just about to drop versions of SSL prior to V3. I used the patch that was already submitted to allow NTP to build, but even with the patch, it seems that ntp-keygen will not create any keys. I don't know if existing keys will work. In any case, I am under a lot of pressure to make sure NTP will continue to work, but SSL is not my forte.

When I applied the patch and tried to run ntp-keygen, it said that DSA was not available. I got this question from the Solaris project manager:

I noticed your update on Bug 33623437 [...] ntp-keygen not working correctly for generating DSA keys.

I thought DSA keys were deprecated though ?

Is that true? Is there something else that is usable that will work?

--
--
I haven't lost my mind, it is backed up in the cloud somewhere.

Brian Utterback, Principal Software Engineer
Phone: +16038973049, Mobile: +16035577683
https://oracle.zoom.us/s/2728168892
One Oracle Drive, Nashua, NH 03062

Prev by Date: Re: [hackers] Which Visual Studio versions are in active use?
Next by Date: [hackers] A couple of questions about SSL and NTP.
Previous by thread: Re: [hackers] MSYS2/Mingw primer
Next by thread: [hackers] A couple of questions about SSL and NTP.
Index(es):
- Date
- Thread