| Re: 答复: [chrony-users] ipV4 and ipV6 |
[ Thread Index |
Date Index
| More chrony.tuxfamily.org/chrony-users Archives
]
- To: chrony-users@xxxxxxxxxxxxxxxxxxxx
- Subject: Re: 答复: [chrony-users] ipV4 and ipV6
- From: Miroslav Lichvar <mlichvar@xxxxxxxxxx>
- Date: Wed, 30 Nov 2022 09:37:40 +0100
- Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1669797464; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=5XjMVFSw/lUzDbdzIC2gWXNbzh8hEP8TKRnovfCvJR4=; b=HXfXpiWBE2AGMgM/8MkKhw0Q2+AtWKUTTKhOrvaOnvC1ph2ont9GoEVR+dn1C+8QV2clUH x0t9n8+7ZAxhzpUTggQ7YPvcuVUwW9gMVHzGVrS8I53u/c/jlsgvLTgjFbUw4431i/dkty gwtvhAcngL2vLNY1128NgNAsud4+Ih8=
On Wed, Nov 30, 2022 at 02:05:20AM +0000, chengyechun wrote:
> I'm testing the IPv4 and IPv6 dual-stack mode. That is, two certificates are configured on the server. One certificate is generated by the IPv4 network port and the other certificate is generated by the IPv6 network port. There are two clients. If the IPv4 certificate is placed on the IPv6 certificate, the IPv4 client can be authenticated successfully, but the IPv6 client cannot pass the TLS authentication.
Do the certificates contain a different name? If there are multiple
certificates with the same name, the server will provide only one the
clients.
> This is strange. Although the bindaddress parameter does not support IPv4 and IPv6 at the same time
You can have two bindaddress directives in the config, one for IPv4
and one for IPv6.
> the ntsservercert parameter can be set to multiple values. Is there any impact between these two parameters?
> The following figure shows the configuration of the server.
It's not clear to me why you need two certificates and what it has to
do with IPv4 vs IPv6.
--
Miroslav Lichvar
--
To unsubscribe email chrony-users-request@xxxxxxxxxxxxxxxxxxxx
with "unsubscribe" in the subject.
For help email chrony-users-request@xxxxxxxxxxxxxxxxxxxx
with "help" in the subject.
Trouble? Email listmaster@xxxxxxxxxxxxxxxxxxxx.