head 1.29; access; symbols pkgsrc-2023Q4:1.28.0.2 pkgsrc-2023Q4-base:1.28 pkgsrc-2023Q3:1.25.0.2 pkgsrc-2023Q3-base:1.25 pkgsrc-2023Q2:1.22.0.2 pkgsrc-2023Q2-base:1.22 pkgsrc-2023Q1:1.20.0.2 pkgsrc-2023Q1-base:1.20 pkgsrc-2022Q4:1.19.0.2 pkgsrc-2022Q4-base:1.19 pkgsrc-2022Q3:1.18.0.2 pkgsrc-2022Q3-base:1.18 pkgsrc-2022Q2:1.15.0.2 pkgsrc-2022Q2-base:1.15 pkgsrc-2022Q1:1.14.0.2 pkgsrc-2022Q1-base:1.14 pkgsrc-2021Q4:1.13.0.2 pkgsrc-2021Q4-base:1.13 pkgsrc-2021Q3:1.12.0.4 pkgsrc-2021Q3-base:1.12 pkgsrc-2021Q2:1.12.0.2 pkgsrc-2021Q2-base:1.12 pkgsrc-2021Q1:1.11.0.2 pkgsrc-2021Q1-base:1.11 pkgsrc-2020Q4:1.10.0.2 pkgsrc-2020Q4-base:1.10 pkgsrc-2020Q3:1.8.0.2 pkgsrc-2020Q3-base:1.8 pkgsrc-2020Q2:1.7.0.2 pkgsrc-2020Q2-base:1.7 pkgsrc-2020Q1:1.6.0.2 pkgsrc-2020Q1-base:1.6 pkgsrc-2019Q4:1.5.0.6 pkgsrc-2019Q4-base:1.5 pkgsrc-2019Q3:1.5.0.2 pkgsrc-2019Q3-base:1.5 pkgsrc-2019Q2:1.3.0.2 pkgsrc-2019Q2-base:1.3 pkgsrc-2019Q1:1.2.0.2 pkgsrc-2019Q1-base:1.2; locks; strict; comment @# @; 1.29 date 2024.01.13.12.08.17; author adam; state Exp; branches; next 1.28; commitid vORZjO3GlicNFhUE; 1.28 date 2023.11.08.13.21.13; author wiz; state Exp; branches; next 1.27; commitid PsuHTklAIsF4bOLE; 1.27 date 2023.10.24.22.11.22; author wiz; state Exp; branches; next 1.26; commitid MTsrqKm6aGrQAVJE; 1.26 date 2023.10.23.06.37.55; author wiz; state Exp; branches; next 1.25; commitid 4YdPmMYgk9hutIJE; 1.25 date 2023.08.14.05.25.26; author wiz; state Exp; branches; next 1.24; commitid LOSB79OLVxvXjIAE; 1.24 date 2023.08.01.23.20.54; author wiz; state Exp; branches; next 1.23; commitid lyjXpsSeA6xpH8zE; 1.23 date 2023.07.01.08.37.46; author wiz; state Exp; branches; next 1.22; commitid OGZpaIgVtdY8O4vE; 1.22 date 2023.06.06.12.42.35; author riastradh; state Exp; branches; next 1.21; commitid xhspr6Z8JLQOWSrE; 1.21 date 2023.04.19.08.11.42; author adam; state Exp; branches; next 1.20; commitid B8gCWhWtMX9vZGlE; 1.20 date 2023.03.09.00.57.04; author gdt; state Exp; branches; next 1.19; commitid BgkTptFrJ0SqVngE; 1.19 date 2022.11.23.16.21.15; author adam; state Exp; branches; next 1.18; commitid ju2K3LUYlTJKqQ2E; 1.18 date 2022.07.30.01.22.07; author tnn; state Exp; branches; next 1.17; commitid hYeOMZFCKOHtcRND; 1.17 date 2022.07.30.00.00.57; author tnn; state Exp; branches; next 1.16; commitid nk3EmxgnbSTvKQND; 1.16 date 2022.06.30.11.18.56; author nia; state Exp; branches; next 1.15; commitid AhctUV91Vubws3KD; 1.15 date 2022.04.18.19.12.13; author adam; state Exp; branches; next 1.14; commitid eC9Na3jrfOOUpIAD; 1.14 date 2022.01.28.12.10.18; author wiz; state Exp; branches; next 1.13; commitid N6ezT4cuweNuFoqD; 1.13 date 2021.12.08.16.06.48; author adam; state Exp; branches; next 1.12; commitid 2PyWjHx5T8rqARjD; 1.12 date 2021.04.21.11.42.50; author adam; state Exp; branches; next 1.11; commitid fph0Axs0eT3az9QC; 1.11 date 2021.01.09.19.50.54; author gdt; state Exp; branches; next 1.10; commitid HVxB4jyTDHZLy5DC; 1.10 date 2020.12.04.20.45.46; author nia; state Exp; branches; next 1.9; commitid FPz71MqRX3WN0tyC; 1.9 date 2020.11.05.09.09.16; author ryoon; state Exp; branches; next 1.8; commitid VqGaBtHnBBcd5GuC; 1.8 date 2020.08.15.02.31.28; author tnn; state Exp; branches; next 1.7; commitid PbsPm2BjkN2Xw6kC; 1.7 date 2020.06.02.08.24.53; author adam; state Exp; branches; next 1.6; commitid nisovMpvvZm3RCaC; 1.6 date 2020.01.18.21.51.02; author jperkin; state Exp; branches; next 1.5; commitid JW4hJgY8ZdoTFdTB; 1.5 date 2019.07.02.19.56.46; author gdt; state Exp; branches; next 1.4; commitid N4TuLORYqErSuvtB; 1.4 date 2019.07.02.00.13.07; author gdt; state Exp; branches; next 1.3; commitid RxYeJk0NgWaqWotB; 1.3 date 2019.04.25.07.33.26; author maya; state Exp; branches; next 1.2; commitid 1FEMQBEPb9uTxHkB; 1.2 date 2019.03.25.15.44.42; author tnn; state Exp; branches; next 1.1; commitid Y3ARISEcLaoIhLgB; 1.1 date 2019.03.25.15.40.35; author tnn; state Exp; branches; next ; commitid X78B1JkVb0olgLgB; desc @@ 1.29 log @ntpsec: updated to 1.2.3 1.2.3 * Change mode6 alignment to four, which may break some compatibility with classic NTP. * Seccomp should now also yield invalid syscall names when dying. * Make ntpq stop dropping output timestamp leading zeroes. * Update documents in quite a few places. * Reset some stats hourly, even when not logged into files. * Add error logging, and stats for ms-sntp. * Add spacing between multiple peer views in ntpq. * We think we have fixed ms-sntp but we can't test it. If you can test it, please let us know if it does/doesn't work. * ntpd and ntpq both treat SHA-1 as an alias for SHA1 NIST uses SHA-1. The crypto package from OpenSSL uses SHA1. * The default crypto type for ntpq is now AES. RFC 8573 deprecated MD5. * There are now log files with hourly statistics for NTS and NTS-KE traffic: filegen ntsstats and filegen ntskestats, * Update ntpsnmpd to use python built-in to get uname information. * Update license file names for REUSE compliance. * Fix ntploggps issue where count_used_satellites checked before it is initialized. * Print out OpenSSL version at configure time. * Enable debug symbols by default, with only an option to disable. * Add support for ecdhcurves list. * Fix build on platforms where `-fstack-protector` relies on libssp, like musl. * Fix ntpdig crash when using 2.ntp.pool.org with a host without IPv6 support. * Do not install libaes_siv test anymore. * Add update option to buildprep. * ntpdig shows packet delay in JSON output. @ text @# $NetBSD: Makefile,v 1.28 2023/11/08 13:21:13 wiz Exp $ DISTNAME= ntpsec-1.2.3 CATEGORIES= time MASTER_SITES= https://ftp.ntpsec.org/pub/releases/ MAINTAINER= pkgsrc-users@@NetBSD.org HOMEPAGE= https://www.ntpsec.org/ COMMENT= Hardened & improved NTP implementation derived from NTP Classic LICENSE= cc-by-v4.0 AND 2-clause-bsd AND modified-bsd AND mit TOOL_DEPENDS+= asciidoc-[0-9]*:../../textproc/asciidoc TOOL_DEPENDS+= waf-[0-9]*:../../devel/waf USE_TOOLS+= bison m4 pkg-config WAF_CONFIGURE_ARGS+= --python=${PYTHONBIN} WAF_CONFIGURE_ARGS+= --pyshebang=${PYTHONBIN} # pkgsrc python PLIST logic expects all python-3.x extensions to use -O1, # but I can't figure out how to pass it through waf, so disable precompiled # python files for now ... WAF_CONFIGURE_ARGS+= --nopyc --nopyo WAF_CONFIGURE_ARGS+= --refclock=all WAF_REPLACE_EXECUTABLE= yes WAF_ENV+= BIN_A2X=${PREFIX}/bin/a2x WAF_ENV+= BIN_XSLTPROC=${PREFIX}/bin/xsltproc WAF_ENV+= PYTHON_CONFIG=${PYTHONCONFIG} RCD_SCRIPTS= ntpd PY_PATCHPLIST= yes PYTHON_VERSIONS_INCOMPATIBLE= 27 38 .include "../../devel/waf/waf.mk" .include "../../geography/gpsd/buildlink3.mk" .include "../../lang/python/batteries-included.mk" .include "../../lang/python/application.mk" .include "../../lang/python/extension.mk" .include "../../security/openssl/buildlink3.mk" BUILDLINK_DEPMETHOD.libxslt?= build .include "../../textproc/libxslt/buildlink3.mk" .include "../../mk/bsd.pkg.mk" @ 1.28 log @*: recursive bump for icu 74.1 @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.27 2023/10/24 22:11:22 wiz Exp $ d3 1 a3 2 DISTNAME= ntpsec-1.2.1 PKGREVISION= 7 d16 1 d24 5 a28 3 WAF_ENV+= PYTHON_CONFIG=${PYTHONCONFIG} WAF_ENV+= BIN_A2X=${PREFIX}/bin/a2x WAF_ENV+= BIN_XSLTPROC=${PREFIX}/bin/xsltproc @ 1.27 log @*: bump for openssl 3 @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.26 2023/10/23 06:37:55 wiz Exp $ d4 1 a4 1 PKGREVISION= 6 @ 1.26 log @*: update for Python base package change Instead of depending on one of the removed packages (that are now included in the base Python packages), include batteries-included.mk to require a Python version that supplies them. Remove now included packages. Bump PKGREVISION. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.25 2023/08/14 05:25:26 wiz Exp $ d4 1 a4 1 PKGREVISION= 5 @ 1.25 log @*: recursive bump for Python 3.11 as new default @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.24 2023/08/01 23:20:54 wiz Exp $ d4 1 a4 1 PKGREVISION= 4 a12 2 DEPENDS+= ${PYPKGPREFIX}-curses-[0-9]*:../../devel/py-curses d35 1 @ 1.24 log @*: remove more references to Python 3.7 @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.23 2023/07/01 08:37:46 wiz Exp $ d4 1 a4 1 PKGREVISION= 3 @ 1.23 log @*: restrict py-numpy users to 3.9+ in preparation for update @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.22 2023/06/06 12:42:35 riastradh Exp $ d33 1 a33 1 PYTHON_VERSIONS_INCOMPATIBLE= 27 37 38 @ 1.22 log @Mass-change BUILD_DEPENDS to TOOL_DEPENDS outside mk/. Almost all uses, if not all of them, are wrong, according to the semantics of BUILD_DEPENDS (packages built for target available for use _by_ tools at build-time) and TOOL_DEPEPNDS (packages built for host available for use _as_ tools at build-time). No change to BUILD_DEPENDS as used correctly inside buildlink3. As proposed on tech-pkg: https://mail-index.netbsd.org/tech-pkg/2023/06/03/msg027632.html @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.21 2023/04/19 08:11:42 adam Exp $ d33 1 a33 1 PYTHON_VERSIONS_INCOMPATIBLE= 27 @ 1.21 log @revbump after textproc/icu update @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.20 2023/03/09 00:57:04 gdt Exp $ d15 2 a16 2 BUILD_DEPENDS+= asciidoc-[0-9]*:../../textproc/asciidoc BUILD_DEPENDS+= waf-[0-9]*:../../devel/waf @ 1.20 log @revbump for gpsd update @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.19 2022/11/23 16:21:15 adam Exp $ d4 1 a4 1 PKGREVISION= 2 @ 1.19 log @massive revision bump after textproc/icu update @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.18 2022/07/30 01:22:07 tnn Exp $ d4 1 a4 1 PKGREVISION= 1 @ 1.18 log @ntpsec: update to 1.2.1 2021-06-06: 1.2.1 Update ntpkeygen/keygone to properly filter # characters. (CVE-2021-22212) Add dextral peers mode in ntpq and ntpmon. Drop NTPv1 as the support was not RFC compliant, maybe v2 except mode 6 next. Fix argument P for ntpd parsing fixed and ntpdate improvements. Fix crash for raw ntpq readvar. Add processor usage to NTS-KE logging except on NetBSD. The build epoch has been replaced with a hardcoded timestamp which will be manually updated every nine years or so (approx 512w). This makes the binaries reproducible by default. Compare versions of ntp.ntpc and libntpc printing a warning if mismatched. Fix libntpc install path if using it. Reduce maxclocks default to 5 to reduce the NTP pool load. Print LIBDIR during ./waf configure. Add documentation, new GPG key, and other cleanups. 2020-10-06: 1.2.0 The minor version bump is to indicate official official support of RFC8915 "Network Time Security for the Network Time Protocol" which was released 2020-09-30. NTS-KE client now defaults to port 4460. NTS-KE server now listens on port 4460. (Listening on port 123 has been removed.) The shebang of installed Python scripts can now be customized with: waf configure --pyshebang="..." NTP clients now use a shared library with Python instead of an extension. Add flakiness option to ntpq and fixed limit=1 in mrulist. Fixed a minor formatting issue in rate page. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.17 2022/07/30 00:00:57 tnn Exp $ d4 1 @ 1.17 log @ntpsec: master site redirects to https, use https directly ... but the certiciate is expired. Have complained to upstream. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.16 2022/06/30 11:18:56 nia Exp $ d3 1 a3 2 DISTNAME= ntpsec-1.1.9 PKGREVISION= 7 d19 1 a29 1 REPLACE_PYTHON+= ntpclients/*.py @ 1.16 log @*: Revbump packages that use Python at runtime without a PKGNAME prefix @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.15 2022/04/18 19:12:13 adam Exp $ d6 1 a6 1 MASTER_SITES= http://ftp.ntpsec.org/pub/releases/ @ 1.15 log @revbump for textproc/icu update @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.14 2022/01/28 12:10:18 wiz Exp $ d4 1 a4 1 PKGREVISION= 6 @ 1.14 log @ntpsec: restrict to python 3 (to be on the safe side; after restricting gpsd to python 3) @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.13 2021/12/08 16:06:48 adam Exp $ d4 1 a4 1 PKGREVISION= 5 @ 1.13 log @revbump for icu and libffi @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.12 2021/04/21 11:42:50 adam Exp $ d33 2 @ 1.12 log @revbump for textproc/icu @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.11 2021/01/09 19:50:54 gdt Exp $ d4 1 a4 1 PKGREVISION= 4 @ 1.11 log @revbump for gpsd udpate @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.10 2020/12/04 20:45:46 nia Exp $ d4 1 a4 1 PKGREVISION= 3 @ 1.10 log @Revbump packages with a runtime Python dep but no version prefix. For the Python 3.8 default switch. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.9 2020/11/05 09:09:16 ryoon Exp $ d4 1 a4 1 PKGREVISION= 2 @ 1.9 log @*: Recursive revbump from textproc/icu-68.1 @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.8 2020/08/15 02:31:28 tnn Exp $ d4 1 a4 1 PKGREVISION= 1 @ 1.8 log @ntpsec: update to 1.1.9 == 2020-05-23: 1.1.9 == Correctly parse ntpq :config output on Python 3 and check return MACs. Add AES and other algorithm support to ntpq and ntpdig, from OpenSSL. Remove support for NetInfo. NetInfo was last supported in Mac OS X v10.4 The configure step now supports --disable-nts for running on systems with older versions of OpenSSL. The default restrictions now start with noquery and limited to reduce the opportunities for being used for DDoS-ing. The draft RFC for NTS has dropped support for TLSv1.2 We now need OpenSSL with TLSv1.3 support (version 1.1.1 or newer). The config keyword +tlsciphers+ has been removed. Additional filtering and sort options have been added to ntpq/mrulist Details are in the man page. Rate limiting has been cleaned up. With "restrict limited", traffic is now limited to an average of 1 packet per second with bursts of 20. (needs doc and maybe config) SIGHUP and hourly checks have been unified. Both now check for a new log file check for a new certificate file check for a new leap file SIGHUP also restarts all pending DNS and NTS probes. NTS client now requires ALPN on TLSv1.3. asciidoctor (1.5.8 or newer) is now supported and is the preferred AsciiDoc processor. asciidoc is still supported, but the minimum supported version has been raised from 8.6.0 to 8.6.8. asciidoc3 (3.0.2 or newer) is also supported. HTML docs are now built by default if an AsciiDoc processor is installed. If you do not want HTML docs, configure with --disable-doc. (Note: Man pages are controlled by a separate --disable-manpage.) Analysis shows that CVE-2020-11868, affecting NTP Classic, cannot affect us, as the peer mode involved has been removed. == 2019-11-17: 1.1.8 == Fix bug in NTS-KE client so that NTP server names work. Fix/tweak several NTS logging messages. == 2019-09-02: 1.1.7 == The numeric literal argument of the 'time1' fudge option on a clock can now have one or more letter suffixes that compensate for era rollover in a GPS device. Each "g" adds the number of seconds in a 1024-week (10-bit) GPS era. Each "G" adds the number of seconds in a 8192-week (13-bit) GPS era. The neoclock4x driver has been removed, due to the hardware and the vendor having utterly vanished from the face of the earth. The NTS ALPN negotiation sequence has been modified for improved interoperability with other NTS implementations. NTS key rotation now happens every 24 hours. It used to rotate every hour to enable testing of recovery from stale cookies. == 2019-07-10: 1.1.6 == Fixes to code quality checks. Fixes to NTS server list. Fix to bug #600. == 2019-06-30: 1.1.5 == Add ALPN for the NTS server, as required by the NTP draft. Revert some ntpq behavior. == 2019-06-21: 1.1.4 == NTS is now implemented. See .../devel/nts.adoc https://tools.ietf.org/html/draft-ietf-ntp-using-nts-for-ntp We thank Cisco for sponsoring the NTS development. Lots of fixes and cleanups to PPS, both implementation and documentation. Pthread support is now required. --disable-dns-lookup is gone. NIST lockclock mode is now a runtime option set by the (previously unused) flag1 mode bit of the local-clock driver. As always, lots of minor fixups and cleanups everywhere. See the git log. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.7 2020/06/02 08:24:53 adam Exp $ d4 1 @ 1.7 log @Revbump for icu @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.6 2020/01/18 21:51:02 jperkin Exp $ d3 1 a3 2 DISTNAME= ntpsec-1.1.3 PKGREVISION= 3 a31 3 # kludge for waf-2.x; fixed upstream already. see patch-wafhelpers_waf.py. CFLAGS+= -I../../build -I../../include @ 1.6 log @*: Recursive revision bump for openssl 1.1.1. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.5 2019/07/02 19:56:46 gdt Exp $ d4 1 a4 1 PKGREVISION= 2 @ 1.5 log @Recursive revbump from gpsd-3.19 @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.4 2019/07/02 00:13:07 gdt Exp $ d4 1 a4 1 PKGREVISION= 1 @ 1.4 log @time/ntpsec: Re-enable gpsd ntpsec used to depend on gpsd, but gpsd in pkgsrc was old so it didn't for a while. Depend on it again, which reenables ntploggps. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.3 2019/04/25 07:33:26 maya Exp $ d4 1 a4 1 PKGREVISION= 2 @ 1.3 log @PKGREVISION bump for anything using python without a PYPKGPREFIX. This is a semi-manual PKGREVISION bump. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.2 2019/03/25 15:44:42 tnn Exp $ d4 1 a4 1 PKGREVISION= 1 d37 1 a37 2 # ntploggps(1) needs py-gps. But gpsd package in pkgsrc is too old. #.include "../../geography/gpsd/buildlink3.mk" @ 1.2 log @ntpsec: fix HOMEPAGE @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.1 2019/03/25 15:40:35 tnn Exp $ d4 1 @ 1.1 log @ntpsec: import ntpsec-1.1.3 A secure, hardened, and improved implementation of Network Time Protocol derived from NTP Classic, Dave Mills's original. @ text @d1 1 a1 1 # $NetBSD$ d8 1 a8 1 HOMEPAGE= ftp://ftp.ntpsec.org/pub/releases/ @