The daemon transmit timestamps are precompensated for the time it takes to generate a MAC using a symmetric key (as measured on chronyd start) and also an average round-trip time of the Samba signing of MS-SNTP responses. This improves accuracy of the transmit timestamp, but it has some issues. The correction has a random error which is changing over time due to variable CPU frequency, system load, migration to a different machine, etc. If the measured delay is too large, the correction may cause the transmit timestamp to be later than the actual transmission. Also, the delay is measured for a packet of a minimal length with no extension fields, and there is no support for NTS. Drop the precompensation in favor of the interleaved mode, which now avoids the authentication delay even when no kernel/hardware timestamps are available.
47 lines
1.7 KiB
C
47 lines
1.7 KiB
C
/*
|
|
chronyd/chronyc - Programs for keeping computer clocks accurate.
|
|
|
|
**********************************************************************
|
|
* Copyright (C) Richard P. Curnow 1997-2002
|
|
*
|
|
* This program is free software; you can redistribute it and/or modify
|
|
* it under the terms of version 2 of the GNU General Public License as
|
|
* published by the Free Software Foundation.
|
|
*
|
|
* This program is distributed in the hope that it will be useful, but
|
|
* WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
* General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License along
|
|
* with this program; if not, write to the Free Software Foundation, Inc.,
|
|
* 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
|
|
*
|
|
**********************************************************************
|
|
|
|
=======================================================================
|
|
|
|
Header for key management module
|
|
*/
|
|
|
|
#ifndef GOT_KEYS_H
|
|
#define GOT_KEYS_H
|
|
|
|
#include "sysincl.h"
|
|
|
|
extern void KEY_Initialise(void);
|
|
extern void KEY_Finalise(void);
|
|
|
|
extern void KEY_Reload(void);
|
|
|
|
extern int KEY_KeyKnown(uint32_t key_id);
|
|
extern int KEY_GetAuthLength(uint32_t key_id);
|
|
extern int KEY_CheckKeyLength(uint32_t key_id);
|
|
extern int KEY_GetKeyInfo(uint32_t key_id, int *type, int *bits);
|
|
|
|
extern int KEY_GenerateAuth(uint32_t key_id, const unsigned char *data,
|
|
int data_len, unsigned char *auth, int auth_len);
|
|
extern int KEY_CheckAuth(uint32_t key_id, const unsigned char *data, int data_len,
|
|
const unsigned char *auth, int auth_len, int trunc_len);
|
|
|
|
#endif /* GOT_KEYS_H */
|