From ecfbde9872e4adda7f0de03b775f55653730c825 Mon Sep 17 00:00:00 2001 From: Miroslav Lichvar Date: Thu, 2 Feb 2023 14:43:19 +0100 Subject: [PATCH] doc: describe minimum useful ntsrefresh --- doc/chrony.conf.adoc | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/doc/chrony.conf.adoc b/doc/chrony.conf.adoc index 6d96f64..a214898 100644 --- a/doc/chrony.conf.adoc +++ b/doc/chrony.conf.adoc @@ -827,6 +827,10 @@ This directory is used also by the <> to save keys. This directive specifies the maximum interval between NTS-KE handshakes (in seconds) in order to refresh the keys authenticating NTP packets. The default value is 2419200 (4 weeks) and the maximum value is 2^31-1 (68 years). ++ +The interval must be longer than polling intervals of all configured NTP +sources using NTS, otherwise the source with a longer polling interval will +refresh the keys on each poll and no NTP packets will be exchanged. [[ntstrustedcerts]]*ntstrustedcerts* [_set-ID_] _file_|_directory_:: This directive specifies a file or directory containing certificates (in the