Commit Graph

  • be503bbcf6 nts: move loading of syscall filter in NTS-KE server Miroslav Lichvar 2020-07-27 09:56:53 +02:00
  • 72bf3d26eb nts: fix error response to NTS-KE request Miroslav Lichvar 2020-07-23 15:46:57 +02:00
  • cc20ead3dc nts: reset NAK indicator with new request Miroslav Lichvar 2020-07-20 16:31:49 +02:00
  • fd8fbcd090 nts: don't allow malformed encrypted extension fields Miroslav Lichvar 2020-07-20 13:38:22 +02:00
  • 77bd0f83fe main: remove unneeded code in signal handler Miroslav Lichvar 2020-07-14 18:34:10 +02:00
  • 32a82a38fd siv: add more assertions Miroslav Lichvar 2020-07-14 17:04:30 +02:00
  • 66e097e3e6 nts: improve NTS-KE server/client code Miroslav Lichvar 2020-07-13 14:25:57 +02:00
  • 51d77d6cfc logging: extend functionality Miroslav Lichvar 2020-07-16 13:16:15 +02:00
  • 2bb0769516 conf: improve error message Miroslav Lichvar 2020-07-14 09:15:29 +02:00
  • 58da0c0ad2 conf: adopt default bind*address values Miroslav Lichvar 2020-07-13 14:19:45 +02:00
  • c10b66b579 nts: follow bind*device settings for NTS-KE sockets Miroslav Lichvar 2020-07-13 14:16:42 +02:00
  • 55a90c3735 nts: deinit gnutls when setting of credentials fails Miroslav Lichvar 2020-07-15 12:11:38 +02:00
  • 962afb9e7d nts: disable input when sending data in NTS-KE session Miroslav Lichvar 2020-07-13 12:21:39 +02:00
  • 7abd982f87 doc: fix formatting with new asciidoctor Miroslav Lichvar 2020-07-14 10:22:46 +02:00
  • c099aac79c socket: fix debug message for unsupported binding Miroslav Lichvar 2020-07-10 09:04:20 +02:00
  • 828e6ce30f doc: mention automatic creation of directories Miroslav Lichvar 2020-07-08 17:11:15 +02:00
  • dc08cbfe59 conf: create ntsdumpdir directory Miroslav Lichvar 2020-07-08 17:04:47 +02:00
  • 3bdcce6903 conf: restrict permissions of created directories Miroslav Lichvar 2020-07-08 17:02:32 +02:00
  • d93aa10bac cmac+hash: change parameter types Miroslav Lichvar 2020-07-08 12:02:12 +02:00
  • de4ecc72d1 nts: don't assume field position in NNA_DecryptAuthEF() Miroslav Lichvar 2020-07-09 13:14:55 +02:00
  • db54bfc0c1 nts: check for negative length in NNA_DecryptAuthEF() Miroslav Lichvar 2020-07-09 13:13:13 +02:00
  • 72ee80debe nts: fix comment about message handler Miroslav Lichvar 2020-07-07 17:55:07 +02:00
  • a3436c26f0 nts: improve session code Miroslav Lichvar 2020-07-07 12:34:29 +02:00
  • b0f5024d56 nts: log details about failed certificate verification Miroslav Lichvar 2020-07-07 12:33:46 +02:00
  • eae4b2abe5 ntp: drop precompensation of TX timestamp Miroslav Lichvar 2020-07-02 15:34:22 +02:00
  • ff03b813b0 ntp: get TX timestamp after authentication Miroslav Lichvar 2020-07-02 15:18:23 +02:00
  • 4e747da4b4 ntp+cmdmon: fix responding to link-local addresses Miroslav Lichvar 2020-06-30 16:13:48 +02:00
  • 99e3c67a81 socket: add support for selecting interface again Miroslav Lichvar 2020-06-30 15:26:55 +02:00
  • c4a2550518 conf: add directives to specify interfaces for binding sockets Miroslav Lichvar 2020-06-30 12:27:10 +02:00
  • 4ef944b734 socket: add support for binding sockets to device Miroslav Lichvar 2020-06-30 10:21:45 +02:00
  • 0f04baeb97 examples: align onoffline with DHCP NM dispatcher Robert Fairley 2020-06-04 14:48:40 -04:00
  • bf7f63eaed examples: add dispatcher for NTP servers from DHCP Robert Fairley 2020-06-04 14:48:35 -04:00
  • 59cf4e0b96 nameserv: don't return scoped IPv6 addresses Miroslav Lichvar 2020-06-29 16:56:09 +02:00
  • 3fc72c0cfa ntp: fix comment about find_slot() Miroslav Lichvar 2020-06-29 16:46:05 +02:00
  • ad69f4f32b configure: link with libnssutil3 for NSS hash support Miroslav Lichvar 2020-06-25 11:00:53 +02:00
  • 81c2b2e886 socket: handle negative sa_length Miroslav Lichvar 2020-06-24 12:07:55 +02:00
  • c9f03fb222 logging: handle too many file logs Miroslav Lichvar 2020-06-24 11:27:41 +02:00
  • b0fe443632 ntp: rework initial burst Miroslav Lichvar 2020-06-23 13:10:02 +02:00
  • 8882fb21e0 example: update chrony.conf examples Miroslav Lichvar 2020-06-22 14:45:42 +02:00
  • 7d551d34a0 test: update cmdmon and chronyc tests with new commands Miroslav Lichvar 2020-06-17 15:56:02 +02:00
  • feef0dd983 ntp: reduce poll adjustment with specific failed tests Miroslav Lichvar 2020-06-17 14:18:49 +02:00
  • d29f7b7c70 nts: warn about missing NTS support Miroslav Lichvar 2020-06-17 13:19:20 +02:00
  • e3cd248f0d nts: update NTS-KE port number Miroslav Lichvar 2020-06-17 12:29:20 +02:00
  • 27e20a568b socket: enable only specified IP families Miroslav Lichvar 2020-06-17 12:06:21 +02:00
  • 80316de3b8 socket: don't log errors on removing socket Miroslav Lichvar 2020-06-17 11:24:15 +02:00
  • f9e2a5852d cmdmon: avoid unsigned shorts Miroslav Lichvar 2020-06-17 10:28:14 +02:00
  • 500c9cbf3b ntp: combine parameters of NCR_AddBroadcastDestination() Miroslav Lichvar 2020-06-17 09:50:23 +02:00
  • 46714fec2d conf: fix missing format string Miroslav Lichvar 2020-06-10 15:54:11 +02:00
  • e1d9a57bd0 conf: reset global pointers after parsing line Miroslav Lichvar 2020-06-10 15:28:17 +02:00
  • 1b82604f61 main: add option to print configuration Miroslav Lichvar 2020-06-10 13:13:11 +02:00
  • d69ac07183 cmdmon: add reload sources command Miroslav Lichvar 2020-06-10 11:20:43 +02:00
  • 519796de37 conf: add sourcedirs directive Miroslav Lichvar 2020-06-10 11:07:48 +02:00
  • ea4811b3b3 conf: detect truncated lines Miroslav Lichvar 2020-06-10 12:37:15 +02:00
  • 951f14ae06 ntp: add configuration ID to sources Miroslav Lichvar 2020-06-09 11:59:25 +02:00
  • 428f9e4228 test: disable object dependencies in main makefile Miroslav Lichvar 2020-06-08 15:14:22 +02:00
  • ea425bf01e client: add tab-completition for authdata command Miroslav Lichvar 2020-06-03 12:22:18 +02:00
  • 8567a0e466 client: add verbose text to authdata command Miroslav Lichvar 2020-06-03 12:20:49 +02:00
  • f6bf12bdcd test: extend siv unit test Miroslav Lichvar 2020-06-03 11:07:00 +02:00
  • e8968ea429 siv: add gnutls support Miroslav Lichvar 2020-06-03 11:03:46 +02:00
  • cf10ce1b68 nts: allow missing SIV support Miroslav Lichvar 2020-06-03 11:03:00 +02:00
  • 15dc83420d test: fix sources unit test Miroslav Lichvar 2020-06-04 11:13:38 +02:00
  • 37dbc211cd sources: add more assertions Miroslav Lichvar 2020-06-04 09:49:17 +02:00
  • ed78cda6ad sources: check for negative distance Miroslav Lichvar 2020-06-04 09:35:52 +02:00
  • faff931a76 sources: require majority for trusted sources Miroslav Lichvar 2020-06-02 18:54:41 +02:00
  • 1e68671690 sources: relax selection of non-trusted sources Miroslav Lichvar 2020-06-02 18:06:46 +02:00
  • 8eb167fd21 sources: extend mark debug message Miroslav Lichvar 2020-06-02 18:05:43 +02:00
  • bc46174e98 sources: include hostname in selection log message Miroslav Lichvar 2020-06-01 17:22:58 +02:00
  • b86c89460a cmdmon: update protocol changelog Miroslav Lichvar 2020-06-03 12:37:45 +02:00
  • 03541f3626 cmdmon: add selectdata command Miroslav Lichvar 2020-05-25 14:10:40 +02:00
  • 39a462496a cmdmon: don't report selection options in source report Miroslav Lichvar 2020-05-25 13:58:00 +02:00
  • 7ba8994838 client: fix help message to indicate mask is optional Miroslav Lichvar 2020-05-25 14:06:08 +02:00
  • 8da025da99 test: add 140-noclientlog test Miroslav Lichvar 2020-05-21 16:19:59 +02:00
  • 5dc7242703 clientlog: fix check for ratelimit and noclientlog Miroslav Lichvar 2020-05-21 16:07:52 +02:00
  • 11bffa0d55 doc: improve answer for chronyc error in FAQ Miroslav Lichvar 2020-05-21 12:42:20 +02:00
  • 5f6f265f80 local: don't remove handlers in finalization Miroslav Lichvar 2020-05-21 11:47:38 +02:00
  • bf92314dc4 test: check logs for assertion failures Miroslav Lichvar 2020-05-21 11:45:38 +02:00
  • a3fda9f992 nts: free client cert credentials when not used Miroslav Lichvar 2020-05-21 10:49:26 +02:00
  • cd34b377aa nts: add debug messages for gnutls init/deinit Miroslav Lichvar 2020-05-21 10:48:51 +02:00
  • 145423068b ntp: change NSR_RemoveSource() to accept IP address only Miroslav Lichvar 2020-05-20 18:06:43 +02:00
  • fb4c3f31c0 ntp: refactor slot finding Miroslav Lichvar 2020-05-20 17:47:16 +02:00
  • 60049f1551 conf: replace empty strings with NULL Miroslav Lichvar 2020-05-20 16:20:43 +02:00
  • e555548dda reference: fix offset sign in log message Miroslav Lichvar 2020-05-20 12:53:16 +02:00
  • eedf61b3a2 clientlog: add debug message for maximum number of records Miroslav Lichvar 2020-05-20 12:14:59 +02:00
  • ab54f76a38 cmdmon: report new client and server statistics Miroslav Lichvar 2020-05-20 12:02:03 +02:00
  • f8df4789b1 clientlog: count authenticated NTP requests Miroslav Lichvar 2020-05-20 10:49:45 +02:00
  • 6366ebc17e clientlog: add NTS-KE service Miroslav Lichvar 2020-05-19 14:22:00 +02:00
  • 3a2d33d5a3 clientlog: refactor client record and API Miroslav Lichvar 2020-05-19 13:45:31 +02:00
  • 1afd5b23d7 clientlog: fix time_t variables Miroslav Lichvar 2020-05-19 12:02:28 +02:00
  • 17fb9e3709 stubs: add NSR_GetAuthReport() Miroslav Lichvar 2020-05-20 17:35:08 +02:00
  • 7a7295992f sys_linux: allow some *time64 syscalls in seccomp filter Vincent Blut 2020-05-14 19:05:14 +02:00
  • 526974366f sys_linux: restructure syscalls in seccomp filter Vincent Blut 2020-05-14 18:10:22 +02:00
  • 51fe589aeb cmdmon: add cookie length to authdata report Miroslav Lichvar 2020-05-18 14:21:53 +02:00
  • 28cf4acf13 cmdmon: limit reported clients by number of packets Miroslav Lichvar 2020-05-18 13:58:55 +02:00
  • ee2220f2e7 cmdmon: allow client records to be reset Miroslav Lichvar 2020-05-18 13:28:49 +02:00
  • a6ec6ec3ac sources: ignore noselect sources when updating selection options Miroslav Lichvar 2020-05-18 12:06:27 +02:00
  • 4f5343f086 doc: fix formatting of example in chrony.conf man page Miroslav Lichvar 2020-05-14 11:55:21 +02:00
  • 79c7384e5e cmdmon: add authdata command Miroslav Lichvar 2020-05-13 16:54:55 +02:00
  • 75beeaf2b0 nts: assign ID to NTS context Miroslav Lichvar 2020-05-13 16:26:56 +02:00
  • f4ed2abdca keys: provide key type and length Miroslav Lichvar 2020-05-13 13:45:03 +02:00
  • 11a5c7337a keys: remove forgotten declaration Miroslav Lichvar 2020-05-12 15:38:37 +02:00