faraphel/chrony
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
2355 commits 8 branches 75 tags 4.3 MiB
Commit graph

5 commits

Author SHA1 Message Date
Miroslav Lichvar
66e097e3e6 nts: improve NTS-KE server/client code 
Add more assertions and comments, refactor initialization of the helper,
and make other changes to make the code more robust.
 2020-07-16 16:02:08 +02:00
Miroslav Lichvar
958d66f8a7 cmdmon: reload NTS server keys on rekey command 
When ntsrotate is set to 0, allow the keys to be reloaded with the rekey
command of chronyc.
 2020-04-16 15:25:51 +02:00
Miroslav Lichvar
d690faeb19 cmdmon: save NTS cookies and server keys on dump command 
Extend the dump command to save also the server NTS keys and client NTS
cookies. Remove the warning for unset dumpdir.
 2020-04-15 16:30:54 +02:00
Miroslav Lichvar
adcf073484 nts: refactor NTS context 
Add a context structure for the algorithm and keys established by
NTS-KE. Modify the client to save the context and reset the SIV key to
the C2S/S2C key before each request/response instead of keeping two SIV
instances.

This will make it easier for the server to support different algorithms
and allow the client to save the context with cookies to disk.
 2020-04-09 16:57:31 +02:00
Miroslav Lichvar
a420ed57a1 nts: add NTS-KE server and client 
Add a client and server implementing the Network Time Security (NTS) Key
Establishment. Use the GnuTLS library for TLS.
 2020-03-05 16:02:15 +01:00