faraphel/chrony
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

doc: improve ntstrustedcerts description

Browse source
This commit is contained in:
Miroslav Lichvar 2023-11-22 10:19:53 +01:00
parent 68a3d52086
commit b92b2da24a
1 changed files with 4 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
doc/chrony.conf.adoc
View file

@ -842,9 +842,10 @@ sources using NTS, otherwise the source with a longer polling interval will
refresh the keys on each poll and no NTP packets will be exchanged. refresh the keys on each poll and no NTP packets will be exchanged.
[[ntstrustedcerts]]*ntstrustedcerts* [_set-ID_] _file_|_directory_:: [[ntstrustedcerts]]*ntstrustedcerts* [_set-ID_] _file_|_directory_::
This directive specifies a file or directory containing certificates (in the This directive specifies a file or directory containing trusted certificates
PEM format) of trusted certificate authorities (CA) which can be used to (in the PEM format) which are needed to verify certificates of NTS-KE servers,
verify certificates of NTS servers. e.g. certificates of trusted certificate authorities (CA) or self-signed
certificates of the servers.
+ +
The optional _set-ID_ argument is a number in the range 0 through 2^32-1, which The optional _set-ID_ argument is a number in the range 0 through 2^32-1, which
selects the set of certificates where certificates from the specified file selects the set of certificates where certificates from the specified file