[chrony-announce] chrony-4.0-pre1 released

[ Thread Index | Date Index | More chrony.tuxfamily.org/chrony-announce Archives ]

To: chrony-announce@xxxxxxxxxxxxxxxxxxxx, chrony-dev@xxxxxxxxxxxxxxxxxxxx, chrony-users@xxxxxxxxxxxxxxxxxxxx
Subject: [chrony-announce] chrony-4.0-pre1 released
From: Miroslav Lichvar <mlichvar@xxxxxxxxxx>
Date: Mon, 16 Mar 2020 17:29:06 +0100
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1584376679; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type; bh=9srTSv+g59dxIrazsahBJXjZAY/DmQJx6Sh4TZSu+CA=; b=ijk6pJiHAUaHGo85KaWdzZW3WioFkdMIBhjnTGD4rOlfUx3Ks23ggGTLzxkusGO+dzy+QJ dgLvnXPMNkq1FNytd61ORrn717cKm1+GPJ9ypHAQ5NKIUv/Yt+0xaxWTvX2WDeCw+rpm9u UJuePKzKZypimbGmfXtiyG8Ma1+tu/M=

The first prerelease for chrony-4.0 is now available.

The main new feature is support for the Network Time Security (NTS)
authentication mechanism based on TLS and AEAD, which enables NTP
servers to securely provide time to a large number of clients (no need
to share keys in the key file). GnuTLS and Nettle are required for the
NTS support. Please note that the specification is not finalised yet
and some values like the NTS-KE port number are expected to change.

Cloudflare and Netnod run public NTP servers with NTS. They can be
specified in chrony.conf with:
server time.cloudflare.com nts ntsport 1234 iburst                                                                        
server nts.ntp.se nts ntsport 4443 iburst                                                                                 

The source code can be downloaded here:
https://download.tuxfamily.org/chrony/chrony-4.0-pre1.tar.gz

SHA256 sum:
c89c4e91e9f16ae815c70120a0b72050cc6838b2467ff43a1f4057573df0529b

Changes since version 3.5:

Enhancements
------------
* Add support for Network Time Security (NTS) authentication
* Add support for AES-CMAC keys (AES128, AES256) with Nettle
* Add support for maxsamples of 1 for faster update with -q/-Q option
* Add -L option to limit log messages by severity
* Avoid replacing NTP sources with unreachable addresses
* Improve NTP loop test to prevent synchronisation to itself
* Update clock synchronisation status and leap status more frequently
* Update seccomp filter
* Add "add pool" command
* Add -N option and sourcename command to print original names of sources
* Add -a option to source/sourcestats command to print unresolved sources
* Add reset command to drop all measurements

Bug fixes
---------
* Handle RTCs that don't support interrupts
* Respond to command requests with correct address on multihomed hosts

Removed features
----------------
* Drop support for RIPEMD keys (RMD128, RMD160, RMD256, RMD320)

-- 
Miroslav Lichvar

Attachment: signature.asc
Description: PGP signature

Messages sorted by: [ date | thread ]

Mail converted by MHonArc 2.6.19+

http://listengine.tuxfamily.org/