head 1.16; access; symbols pkgsrc-2023Q4:1.16.0.4 pkgsrc-2023Q4-base:1.16 pkgsrc-2023Q3:1.16.0.2 pkgsrc-2023Q3-base:1.16 pkgsrc-2023Q2:1.15.0.14 pkgsrc-2023Q2-base:1.15 pkgsrc-2023Q1:1.15.0.12 pkgsrc-2023Q1-base:1.15 pkgsrc-2022Q4:1.15.0.10 pkgsrc-2022Q4-base:1.15 pkgsrc-2022Q3:1.15.0.8 pkgsrc-2022Q3-base:1.15 pkgsrc-2022Q2:1.15.0.6 pkgsrc-2022Q2-base:1.15 pkgsrc-2022Q1:1.15.0.4 pkgsrc-2022Q1-base:1.15 pkgsrc-2021Q4:1.15.0.2 pkgsrc-2021Q4-base:1.15 pkgsrc-2021Q3:1.13.0.44 pkgsrc-2021Q3-base:1.13 pkgsrc-2021Q2:1.13.0.42 pkgsrc-2021Q2-base:1.13 pkgsrc-2021Q1:1.13.0.40 pkgsrc-2021Q1-base:1.13 pkgsrc-2020Q4:1.13.0.38 pkgsrc-2020Q4-base:1.13 pkgsrc-2020Q3:1.13.0.36 pkgsrc-2020Q3-base:1.13 pkgsrc-2020Q2:1.13.0.32 pkgsrc-2020Q2-base:1.13 pkgsrc-2020Q1:1.13.0.12 pkgsrc-2020Q1-base:1.13 pkgsrc-2019Q4:1.13.0.34 pkgsrc-2019Q4-base:1.13 pkgsrc-2019Q3:1.13.0.30 pkgsrc-2019Q3-base:1.13 pkgsrc-2019Q2:1.13.0.28 pkgsrc-2019Q2-base:1.13 pkgsrc-2019Q1:1.13.0.26 pkgsrc-2019Q1-base:1.13 pkgsrc-2018Q4:1.13.0.24 pkgsrc-2018Q4-base:1.13 pkgsrc-2018Q3:1.13.0.22 pkgsrc-2018Q3-base:1.13 pkgsrc-2018Q2:1.13.0.20 pkgsrc-2018Q2-base:1.13 pkgsrc-2018Q1:1.13.0.18 pkgsrc-2018Q1-base:1.13 pkgsrc-2017Q4:1.13.0.16 pkgsrc-2017Q4-base:1.13 pkgsrc-2017Q3:1.13.0.14 pkgsrc-2017Q3-base:1.13 pkgsrc-2017Q2:1.13.0.10 pkgsrc-2017Q2-base:1.13 pkgsrc-2017Q1:1.13.0.8 pkgsrc-2017Q1-base:1.13 pkgsrc-2016Q4:1.13.0.6 pkgsrc-2016Q4-base:1.13 pkgsrc-2016Q3:1.13.0.4 pkgsrc-2016Q3-base:1.13 pkgsrc-2016Q2:1.13.0.2 pkgsrc-2016Q2-base:1.13 pkgsrc-2016Q1:1.11.0.4 pkgsrc-2016Q1-base:1.11 pkgsrc-2015Q4:1.11.0.2 pkgsrc-2015Q4-base:1.11 pkgsrc-2015Q3:1.10.0.2 pkgsrc-2015Q3-base:1.10 pkgsrc-2015Q2:1.9.0.4 pkgsrc-2015Q2-base:1.9 pkgsrc-2015Q1:1.9.0.2 pkgsrc-2015Q1-base:1.9 pkgsrc-2014Q4:1.7.0.72 pkgsrc-2014Q4-base:1.7 pkgsrc-2014Q3:1.7.0.70 pkgsrc-2014Q3-base:1.7 pkgsrc-2014Q2:1.7.0.68 pkgsrc-2014Q2-base:1.7 pkgsrc-2014Q1:1.7.0.66 pkgsrc-2014Q1-base:1.7 pkgsrc-2013Q4:1.7.0.64 pkgsrc-2013Q4-base:1.7 pkgsrc-2013Q3:1.7.0.62 pkgsrc-2013Q3-base:1.7 pkgsrc-2013Q2:1.7.0.60 pkgsrc-2013Q2-base:1.7 pkgsrc-2013Q1:1.7.0.58 pkgsrc-2013Q1-base:1.7 pkgsrc-2012Q4:1.7.0.56 pkgsrc-2012Q4-base:1.7 pkgsrc-2012Q3:1.7.0.54 pkgsrc-2012Q3-base:1.7 pkgsrc-2012Q2:1.7.0.52 pkgsrc-2012Q2-base:1.7 pkgsrc-2012Q1:1.7.0.50 pkgsrc-2012Q1-base:1.7 pkgsrc-2011Q4:1.7.0.48 pkgsrc-2011Q4-base:1.7 pkgsrc-2011Q3:1.7.0.46 pkgsrc-2011Q3-base:1.7 pkgsrc-2011Q2:1.7.0.44 pkgsrc-2011Q2-base:1.7 pkgsrc-2011Q1:1.7.0.42 pkgsrc-2011Q1-base:1.7 pkgsrc-2010Q4:1.7.0.40 pkgsrc-2010Q4-base:1.7 pkgsrc-2010Q3:1.7.0.38 pkgsrc-2010Q3-base:1.7 pkgsrc-2010Q2:1.7.0.36 pkgsrc-2010Q2-base:1.7 pkgsrc-2010Q1:1.7.0.34 pkgsrc-2010Q1-base:1.7 pkgsrc-2009Q4:1.7.0.32 pkgsrc-2009Q4-base:1.7 pkgsrc-2009Q3:1.7.0.30 pkgsrc-2009Q3-base:1.7 pkgsrc-2009Q2:1.7.0.28 pkgsrc-2009Q2-base:1.7 pkgsrc-2009Q1:1.7.0.26 pkgsrc-2009Q1-base:1.7 pkgsrc-2008Q4:1.7.0.24 pkgsrc-2008Q4-base:1.7 pkgsrc-2008Q3:1.7.0.22 pkgsrc-2008Q3-base:1.7 cube-native-xorg:1.7.0.20 cube-native-xorg-base:1.7 pkgsrc-2008Q2:1.7.0.18 pkgsrc-2008Q2-base:1.7 cwrapper:1.7.0.16 pkgsrc-2008Q1:1.7.0.14 pkgsrc-2008Q1-base:1.7 pkgsrc-2007Q4:1.7.0.12 pkgsrc-2007Q4-base:1.7 pkgsrc-2007Q3:1.7.0.10 pkgsrc-2007Q3-base:1.7 pkgsrc-2007Q2:1.7.0.8 pkgsrc-2007Q2-base:1.7 pkgsrc-2007Q1:1.7.0.6 pkgsrc-2007Q1-base:1.7 pkgsrc-2006Q4:1.7.0.4 pkgsrc-2006Q4-base:1.7 pkgsrc-2006Q3:1.7.0.2 pkgsrc-2006Q3-base:1.7 pkgsrc-2006Q2:1.6.0.8 pkgsrc-2006Q2-base:1.6 pkgsrc-2006Q1:1.6.0.6 pkgsrc-2006Q1-base:1.6 pkgsrc-2005Q4:1.6.0.4 pkgsrc-2005Q4-base:1.6 pkgsrc-2005Q3:1.6.0.2 pkgsrc-2005Q3-base:1.6 pkgsrc-2005Q2:1.5.0.4 pkgsrc-2005Q2-base:1.5 pkgsrc-2005Q1:1.5.0.2 pkgsrc-2005Q1-base:1.5 pkgsrc-2004Q4:1.3.0.2 pkgsrc-2004Q4-base:1.3 pkgsrc-2004Q3:1.1.1.1.0.2 pkgsrc-2004Q3-base:1.1.1.1 pkgsrc-base:1.1.1.1 TNF:1.1.1; locks; strict; comment @# @; 1.16 date 2023.08.12.17.04.45; author pin; state Exp; branches; next 1.15; commitid gaw2SrWrBhpygwAE; 1.15 date 2021.10.26.11.06.12; author nia; state Exp; branches; next 1.14; commitid G83yJyZF8er6kjeD; 1.14 date 2021.10.07.14.42.02; author nia; state Exp; branches; next 1.13; commitid EMvsIaZgYm1t8TbD; 1.13 date 2016.06.15.05.40.21; author wiz; state Exp; branches; next 1.12; commitid j7f44hxxVAUYuwaz; 1.12 date 2016.05.14.14.55.34; author bsiegert; state Exp; branches; next 1.11; commitid UC7tTbLEWPz1Bs6z; 1.11 date 2015.11.04.00.35.17; author agc; state Exp; branches; next 1.10; commitid K5R8pkzReRJy0IHy; 1.10 date 2015.07.03.12.31.12; author wiz; state Exp; branches; next 1.9; commitid wWonw78y58WBXPry; 1.9 date 2015.02.01.01.47.27; author wiz; state Exp; branches; next 1.8; commitid tADwOFeudGJFhf8y; 1.8 date 2015.01.20.10.45.01; author wiz; state Exp; branches; next 1.7; commitid g2YSuRqZRBpXDK6y; 1.7 date 2006.08.20.14.50.43; author peter; state Exp; branches; next 1.6; 1.6 date 2005.06.28.17.13.25; author peter; state Exp; branches; next 1.5; 1.5 date 2005.02.24.12.13.58; author agc; state Exp; branches; next 1.4; 1.4 date 2005.01.07.09.00.51; author peter; state Exp; branches; next 1.3; 1.3 date 2004.11.19.14.15.56; author peter; state Exp; branches; next 1.2; 1.2 date 2004.10.23.10.26.15; author peter; state Exp; branches; next 1.1; 1.1 date 2004.07.19.19.17.25; author xtraeme; state Exp; branches 1.1.1.1; next ; 1.1.1.1 date 2004.07.19.19.17.25; author xtraeme; state Exp; branches; next ; desc @@ 1.16 log @net/openntpd: update to 6.8p1 6.8p1 - New release based on OpenBSD 6.8 * The ntpd daemon now gets and sets the clock in a secure way when booting even when a battery-backed clock is absent. * Improvements in DNS resolving and constraints checking, especially during startup. Unreliable NTP peers are removed from the pool and DNS resolving is repeated to add replacements. * Improved reliability and security of TLS constraint checking. * Improved logging of failure cases. * Prevent the case of multiple ntpds running at once by checking presence of the local control socket. * TLS certificates are now searched in TLS_CA_CERT_FILE. * The default ntpd.conf configuration file now uses 9.9.9.9 and 2620:fe::fe, in addition to google.com, when performing time constraint validation. * Improved handling unsynched mode when there is no replies from an NTP server, such as when there are network connectivity issues. * To build OpenNTPD with time constraint support, libtls from LibreSSL 3.2.2 or later are recommended. LibreSSL 3.2.2 and later include a self-contained libtls, which allows OpenNTPD to work with constraints even on systems even where libcrypto and libssl are not from LibreSSL. 6.2p3 - Bug fixes * Fixed build on OS X 6.2p2 - Bug fixes * Fixed support for 'query from' and clarified usage. 6.2p1 - New release based on OpenBSD 6.2 * Added option "query from " to ntpd.conf, to specify a local IP address for outgoing NTP queries. 6.1p1 - New release based on OpenBSD 6.1 * Quieted warnings about constraint connection retries. * Implemented fork+exec for ntpd child processes. * Added imsg inter-process reliability fixes. * Fixed memory leaks and reduced heap memory usage. * Numerous logging improvements and additions. * Added macOS 10.12 getentropy support. * Fixed arc4random blacklist use native implementations where possible. @ text @$NetBSD: distinfo,v 1.15 2021/10/26 11:06:12 nia Exp $ BLAKE2s (openntpd-6.8p1.tar.gz) = e747f977ef2bd4ae24260b413234e479befba77eaa769d1e6ec92842f9fdc06b SHA512 (openntpd-6.8p1.tar.gz) = 200056bedb9c757aae1ce5d3f6655175ec058cb479429fe4704955f3a3fa15e8a9cb578ae4898ddb4cfc08c9742bbab6a7c92b5e569f06a148e40c448360b58f Size (openntpd-6.8p1.tar.gz) = 443997 bytes @ 1.15 log @ net: Replace RMD160 checksums with BLAKE2s checksums All checksums have been double-checked against existing RMD160 and SHA512 hashes Not committed (merge conflicts...): net/radsecproxy/distinfo The following distfiles could not be fetched (fetched conditionally?): ./net/citrix_ica/distinfo citrix_ica-10.6.115659/en.linuxx86.tar.gz ./net/djbdns/distinfo dnscache-1.05-multiple-ip.patch ./net/djbdns/distinfo djbdns-1.05-test28.diff.xz ./net/djbdns/distinfo djbdns-1.05-ignoreip2.patch ./net/djbdns/distinfo djbdns-1.05-multiip.diff ./net/djbdns/distinfo djbdns-cachestats.patch @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.14 2021/10/07 14:42:02 nia Exp $ d3 3 a5 3 BLAKE2s (openntpd-6.0p1.tar.gz) = 41b483263fccef867d123e7946d30ca88a18f47ea44db16f515367d4b207f166 SHA512 (openntpd-6.0p1.tar.gz) = a71c516dbe7596cbcb3a385112a59a82185b7e3d93a52eda695cea5a0a599ba7fbf58daa81da55d608255cb6950398123fa7d71663604a4c3bcbee949711296d Size (openntpd-6.0p1.tar.gz) = 432696 bytes @ 1.14 log @net: Remove SHA1 hashes for distfiles @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.13 2016/06/15 05:40:21 wiz Exp $ d3 1 a3 1 RMD160 (openntpd-6.0p1.tar.gz) = a07b4c96d843c206550a20f839485c04771916b8 @ 1.13 log @Updated openntpd to 6.0p1. Changes since OpenNTPD 5.9p1 ============================ * Fixed a link failure on older Linux distributions and a build failure on FreeBSD. * Set MOD_MAXERROR to avoid unsynced time status when using ntp_adjtime. * Fixed HTTP Timestamp header parsing to use strptime in a more portable fashion. * Hardened TLS for ntpd constraints, enabling server name verification. Thanks to Luis M. Merino. Note that HTTPS TLS constraints are currently disabled in pkgsrc pending evaluation of how best to deal with libressl. @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.12 2016/05/14 14:55:34 bsiegert Exp $ a2 1 SHA1 (openntpd-6.0p1.tar.gz) = 4495e1ba750a6c6c623bba784c5e0f6423585206 @ 1.12 log @Update openntpd to 5.9p1, from Paul B. Henson in PR pkg/51092. Changes since OpenNTPD 5.7p4 ============================ * When a single "constraint" is specified, try all returned addresses until one succeeds, rather than the first returned address. * Relaxed the constraint error margin to be proportional to the number of NTP peers, avoid constant reconnections when there is a bad NTP peer. * Removed disabled hotplug sensor support. * Added support for detecting crashes in constraint subprocesses. * Moved the execution of constraints from the ntp process to the parent process, allowing for better privilege separation since the ntp process can be further restricted. * Added pledge(2) support. * Updated to require LibreSSL 2.3.2 or greater. * Fixed high CPU usage when the network is down. * Fixed various memory leaks. * Switched to RMS for jitter calculations. * Unified logging functions with other OpenBSD base programs. OpenNTPD portable-specific changes: * Added support for syncing time with the Realtime Clock (RTC) on OSes that require it. * CFLAGS is no longer overridden by the build system. * FreeBSD RTABLE support is disabled * FreeBSD is no longer linked with -lmd to avoid hash function collisions, causing failures in constraint certificate loading. * Fixed crashes due to __progname being used before initialized. * Added Solaris 10 compatibility. * Added --disable-https-constraint build option for explicitly disabling constraint support. * Synced build system files with LibreSSL Note that HTTPS TLS constraints are currently disabled in pkgsrc pending evaluation of how best to deal with libressl. @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.11 2015/11/04 00:35:17 agc Exp $ d3 4 a6 5 SHA1 (openntpd-5.9p1.tar.gz) = ad190fea59fab655ce79b263849d552e46accaac RMD160 (openntpd-5.9p1.tar.gz) = b3fb3371b3f2612c7fe2a4d36dd25bc96e1c772e SHA512 (openntpd-5.9p1.tar.gz) = 227a4d42f43f4abfaa97fb85cf121d3b9a6646259faeda785dbeb3e4a27285a7f95daf96e72135871a31f772895f3b66c10bd628c87e453507ce69102f5e1213 Size (openntpd-5.9p1.tar.gz) = 432844 bytes SHA1 (patch-configure) = 9a6b639f7a88d2047fa2b61727b0824406ab660f @ 1.11 log @Add SHA512 digests for distfiles for net category Problems found with existing digests: Package haproxy distfile haproxy-1.5.14.tar.gz 159f5beb8fdc6b8059ae51b53dc935d91c0fb51f [recorded] da39a3ee5e6b4b0d3255bfef95601890afd80709 [calculated] Problems found locating distfiles: Package bsddip: missing distfile bsddip-1.02.tar.Z Package citrix_ica: missing distfile citrix_ica-10.6.115659/en.linuxx86.tar.gz Package djbdns: missing distfile djbdns-1.05-test25.diff.bz2 Package djbdns: missing distfile djbdns-cachestats.patch Package djbdns: missing distfile 0002-dnscache-cache-soa-records.patch Package gated: missing distfile gated-3-5-11.tar.gz Package owncloudclient: missing distfile owncloudclient-2.0.2.tar.xz Package poink: missing distfile poink-1.6.tar.gz Package ra-rtsp-proxy: missing distfile rtspd-src-1.0.0.0.tar.gz Package ucspi-ssl: missing distfile ucspi-ssl-0.70-ucspitls-0.1.patch Package waste: missing distfile waste-source.tar.gz Otherwise, existing SHA1 digests verified and found to be the same on the machine holding the existing distfiles (morden). All existing SHA1 digests retained for now as an audit trail. @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.10 2015/07/03 12:31:12 wiz Exp $ d3 5 a7 7 SHA1 (openntpd-5.7p4.tar.gz) = ba885dc7cf599161b351cd90af2af175071e3a9d RMD160 (openntpd-5.7p4.tar.gz) = d99d0058ce67272e5dff3cd945f0beaaf564591c SHA512 (openntpd-5.7p4.tar.gz) = 2a185139c915482086069fa19dd3070884a415137d1688059559d2da892928afbbe2fa0a8ade70d474809710265dcc05906abaf261892d7894e70272e2e516ef Size (openntpd-5.7p4.tar.gz) = 427900 bytes SHA1 (patch-src_config.c) = baffc96d29a1d4c8482add8a2f89e7c42bbacf96 SHA1 (patch-src_ntp.c) = 12fa52fae73f97ed6f49794ef964519ac70ddc5c SHA1 (patch-src_ntpd.conf.5) = c5ca38a046ad68f1997c0d8b5aaa6cee171b17b1 @ 1.10 log @Update to 5.7p4, provided by Paul B. Henson in PR 49930: Changes since OpenNTPD 5.7p3 ============================ * Added support for using HTTPS time constraints to validate NTP responses. * Workaround a bug in the Solaris adjtime call that caused the olddelta to never reach 0, leading to continual sync/unsync messages from ntpd. * Workaround an overflow on systems with 32-bit time_t. This can result in a failure to set the time if the initial clock is set later than early 2036. Systems with a 32-bit time_t should upgrade well in advance of this date, but today this helps with systems that boot with an invalid initial time. Note:the HTTPS time constraints feature is not currently available in pkgsrc due to the lack of libtls. @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.9 2015/02/01 01:47:27 wiz Exp $ d5 1 @ 1.9 log @Update to 5.7p3, from Paul B. Henson in PR 49620. Changes since OpenNTPD 5.7p2 ============================ * Fixed issue resolving hostnames when the network is initially unavailable. * Fixed process name logging on Linux and OS X. * Fixed adjfreq failures on Solaris due to uninitialized struct timex. * Support building on Linux musl libc. @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.8 2015/01/20 10:45:01 wiz Exp $ d3 6 a8 3 SHA1 (openntpd-5.7p3.tar.gz) = 02ad9ae80f2dfd6cfbcc642d35f73093d167a067 RMD160 (openntpd-5.7p3.tar.gz) = 7996771b7041add8f8c3233f30b9dfaab027eb7b Size (openntpd-5.7p3.tar.gz) = 409734 bytes @ 1.8 log @Update to 5.7p2 based on PR 49583 by Paul B. Henson. 2015-01-20 OpenNTPD 5.7p2 * Switched the drift file from an unscaled frequency offset to ppm. The latter format is compatible with that of ntp.org. This allows easy switching between ntpd daemons * Fixed a memory leak in DNS lookups. * Added support for setting the process title on Linux and OS X. The different processes are now possible to tell apart by role in the process list. * Import NetBSD support. * Various bugfixes and refinements from the community. 2015-01-08 OpenNTPD 5.7p1 * Support for a new build infrastructure based on the LibreSSL framework. Source code is integrated directly from the OpenBSD tree with few manual changes, easing maintenance. * Removed support for several OSes pending test reports and updated portability code. * Supports the Simple Network Time Protocol version 4 as described in RFC 5905 * Added route virtualization (rdomain) support. * Added ntpctl(8), which allows for querying ntpd(8) at runtime. * Finer-grained clock adjustment via adjfreq / ntp_adjtime where available. * Improved latency on heavily-loaded machines. @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.7 2006/08/20 14:50:43 peter Exp $ d3 3 a5 3 SHA1 (openntpd-5.7p2.tar.gz) = ccfb9a0c9acff8a8643d7604ed66a070b7f6bd4e RMD160 (openntpd-5.7p2.tar.gz) = e99c3d1a7535ea4b85feca93d4b5158e396ac740 Size (openntpd-5.7p2.tar.gz) = 408421 bytes @ 1.7 log @Update openntpd version 3.9p1. Submitted by Shaun Amott in PR/34231. Changes since previous version in pkgsrc: 20060513 - (dtucker) [configure.ac includes.h ntp_msg.c] Add UnixWare support. Based on patch from luke.bakken at gmail.com. - (dtucker) [version.h] Release 3.9. - (dtucker) [openbsd-compat/fake-rfc2553.c] Missing braces in initializer. 20060423 - (dtucker) [configure.ac] Correctly fall back to builtin-arc4random when OpenSSL is not present. 20060116 - (dtucker) [INSTALL configure.ac ntp.c] Make configure --with-privsep-path compile in the chroot directory. Default behavior remains to chroot to the ntpd user's home dir. Based in part on a patch from OpenWall via solar at openwall com. - (dtucker) [Makefile.in] Make rebuild of y.tab.c parse conditional. - (dtucker) [configure.ac defines.h] Enable replacement getifaddrs via ioctl on Linux. - (dtucker) [configure.ac openbsd-compat/fake-rfc2553.{c,h}] Add in6addr_any if system libraries don't have it. - (dtucker) [configure.ac openbsd-compat/bsd-misc.c] Add null implementation of strsignal(). - (dtucker) [openbsd-compat/openbsd-compat.h] Template for strsignal. - (dtucker) OpenBSD CVS Sync - dtucker@@cvs.openbsd.org 2005/07/06 19:54:24 [client.c] add another non-fatal error for recvfrom; ok henning@@ (ID sync only, already in portable) - dtucker@@cvs.openbsd.org 2005/07/11 18:04:28 [client.c] Print actual error when in debug mode; ok henning@@ - dtucker@@cvs.openbsd.org 2005/07/11 18:05:34 [ntp.c] Print privsep user and dir when in debug mode; ok henning@@ - dtucker@@cvs.openbsd.org 2005/07/11 18:08:06 [ntpd.c] More descriptive error if a signal causes the child to exit; ok henning@@ - henning@@cvs.openbsd.org 2005/07/15 13:34:52 [ntp.c] fix a function name in an error message why this was rotting in my tree for so long, I dunno - and I dunno where it came from - henning@@cvs.openbsd.org 2005/07/15 13:36:10 [ntp.c] remove recently added "using privsep user X" message, spams console in -s mode, noticed by kettenis - henning@@cvs.openbsd.org 2005/07/15 13:37:15 [ntpd.h] shrink read buffer size from 64k to 4k, this is not bgpd and we're dealing with way less data - dtucker@@cvs.openbsd.org 2005/07/22 18:58:56 [server.c] Skip invalid interfaces during 'listen on *'; ok henning@@ - henning@@cvs.openbsd.org 2005/08/09 00:42:32 [ntp.c] with -s, do not wait if we don't have any peers at all. From: Thomas Jarosch - dtucker@@cvs.openbsd.org 2005/08/10 23:48:36 [client.c ntp.c ntpd.h server.c] Propogate server's leap indicator flags to clients; ok henning@@ - henning@@cvs.openbsd.org 2005/08/12 02:21:52 [buffer.c] check for EINTR too after writev(), pt out by Alexander Farber - henning@@cvs.openbsd.org 2005/08/12 02:26:29 [buffer.c] on writing, we actually can deal with ENOBUFS just as well as with EAGAIN and EINTR, so do it, more or less from bgpd - wvdputte@@cvs.openbsd.org 2005/09/07 07:27:10 [ntpd.c] when running ntpd with "-s" as it's argument from /etc/rc.conf, make sure the output goes to syslog and not console by moving around log_init - dtucker@@cvs.openbsd.org 2005/09/24 10:32:03 [client.c ntp_msg.c ntpd.h server.c] Log source address for 'malformed packet' errors. ok henning@@ - dtucker@@cvs.openbsd.org 2006/01/19 17:40:16 [server.c] Check SA_LEN(sa) after sa is checked for NULL. Pointed out by solar at openwall.com, ok henning@@ - dtucker@@cvs.openbsd.org 2006/01/19 22:20:23 [server.c] Do not attempt to listen on interfaces with a wildcard address; ok henning@@ 20050729 - (dtucker) [configure.ac] Skip OpenSSL checks for cross-compilation. Found and tested by Scott Hays. 20050707 - (dtucker) [openbsd-compat/bsd-setres[ug]id.c] Add code to use setre[ug]id and some sanity checks. - (dtucker) [configure.ac] Alphabetize $host case block. - (dtucker) [configure.ac server.c openbsd-compat/Makefile.in openbsd-compat/bsd-getifaddrs.{c,h} openbsd-compat/openbsd-compat.h] Add getifaddrs() to compat layer. Not enabled by default on any platform now, enable with -DGETIFADDRS_VIA_SIOCGIFCONF at your own risk. - (dtucker) [client.c] recvfrom on HP-UX will return EADDRNOTAVAIL instead of ECONNREFUSED for a port-unreachable, so add to the non-fatal error codes. - (dtucker) OpenBSD CVS Sync - dtucker@@cvs.openbsd.org 2005/07/05 20:09:12 [client.c ntp.c ntpd.h server.c] Save transmit time for each peer for later use as refid for SNTPv4 replies. ok henning@@ 20050703 - (dtucker) OpenBSD CVS Sync - henning@@cvs.openbsd.org 2005/03/23 11:42:04 [imsg.c ntpd.h] wpos in struct buf_read and datalen in imsg_get should be size_t and not ssize_t From: Alexander von Gernler - henning@@cvs.openbsd.org 2005/03/23 12:36:35 [buffer.c] remove now osolete comment, from a mail exchange with Alexander von Gernler - henning@@cvs.openbsd.org 2005/03/24 11:56:22 [ntpd.c] fatal vs fatalx, Alexander von Gernler - henning@@cvs.openbsd.org 2005/03/24 15:50:07 [ntp.c] one more fatal/fatalx, alexander - henning@@cvs.openbsd.org 2005/03/31 12:14:01 [log.c] zap includes, Alexander von Gernler - henning@@cvs.openbsd.org 2005/03/31 17:02:43 [ntpd.c] zap includes, grunk - henning@@cvs.openbsd.org 2005/04/18 11:06:35 [client.c] prevent replies with negative delay from being used, could happen with -s From: Joerg Sonnenberger of dragonfly - henning@@cvs.openbsd.org 2005/04/18 11:07:55 [ntp.c] after setting the clock hard correct the "next" and "deadline" timestamps by the offset From: Joerg Sonnenberger - henning@@cvs.openbsd.org 2005/04/18 14:12:50 [ntp.c] correctness: only account for offset after settime in next and deadline when those timers are actually running. due to the way ntpd's logic works this does not really make a difference, but correctness is good. spotted by me, joerg agrees - henning@@cvs.openbsd.org 2005/04/18 20:46:02 [ntpd.c] extra paranoia, from a discussion with joerg - henning@@cvs.openbsd.org 2005/04/19 11:08:41 [client.c] move the "reply from ... " log msg in -d mdoe uop a bit so it actually comes before the "adjusting local clock by..." one, joerg - henning@@cvs.openbsd.org 2005/04/26 15:18:22 [buffer.c imsg.c ntpd.h] unify shared code a bit again to make future syncs easier From: Alexander von Gernler - djm@@cvs.openbsd.org 2005/05/03 05:44:35 [ntp.c] setres[ug]id; ok deraadt@@ - henning@@cvs.openbsd.org 2005/05/11 15:12:35 [config.c] don't touch *hn in failure case. no real change due to the way we use it but more correct. from Michael Knudsen - henning@@cvs.openbsd.org 2005/05/24 08:46:43 [ntp.c] no need for endpwent(0 here either - henning@@cvs.openbsd.org 2005/05/25 06:10:50 [server.c] ifa->ifa_addr can be NULL in some cases, pt out by Kurt Roeckx / bugs.debian.org/310586 - dtucker@@cvs.openbsd.org 2005/05/26 19:13:06 [ntp.c ntpd.c] Ensure previous adjust has completed before clearing alarm flag; ok henning@@ - henning@@cvs.openbsd.org 2005/06/20 02:42:57 [client.c ntp.c ntpd.c ntpd.h parse.y] use a little state engine to keep track of delayed dns lookups and such, eases things tested by Jason Ackley Matthias Kilian Stephen Marley sturm@@ theo ok - henning@@cvs.openbsd.org 2005/06/20 03:11:13 [ntpd.c ntpd.h] use a #define for the time to wait on -s and clarify a log msg - deraadt@@cvs.openbsd.org 2005/06/22 05:55:18 [ntpd.8] (ID sync only; section is not in portable man page) we do not do -s in /etc/rc anymore. this is because, even if -s did try to do it's job it would have to choose between two cases: 1. either it would take a very long time to get the correct adjustment, thus, if you are not currently on the net right, you wait a long time (or must type ^C, which is ridiculous) 2. ntpd could be modified to "abort early", but then would not meet the promise made by -s in the manual page (note: it does not say that it "tries") therefore, -s and -S must become user choices. Sorry. This same choice is made in lots of other places - (dtucker) [LICENCE configure.ac openbsd-compat/Makefile.in openbsd-compat/bsd-setres[ug]id.c openbsd-compat/openbsd-compat.h removed openbsd-compat/uidswap.c] Use setres[ug]id interface on all platforms. Currently only implements the case where ruid == euid == suid which is all ntpd uses (may be extended later). - (dtucker) [Makefile.in] Use example ntpd.conf from srcdir so "make install" works for the srcdir != builddir. - (dtucker) [openbsd-compat/{bsd-poll.c,bsd-setresgid.c,bsd-setresuid.c}] Add CVS Ids 20050629 - (dtucker) [configure.ac openbsd-compat/{Makefile.in,errx.c,verrx.c, openbsd-compat.h}] Add errx(), in anticipation of it being used in ntpd. - (dtucker) [INSTALL] Add a bit more detail on the privsep user and group. 20050627 - (dtucker) [README] Make it clear that the footnote only applies to old Solaris systems, based on feedback from oyvind at repvik.org. - (dtucker) [INSTALL] Point out that --with-ssl-dir is only used if we're not using the builtin arc4random. 20050626 - (dtucker) [INSTALL] Add installation directions, lack thereof pointed out by oyvind at repvik.org. - (dtucker) [Makefile.in configure.ac] Have configure find a yacc that works. - (dtucker) [Makefile.in] Make check for existing ntp user more specific. 20050619 - (dtucker) [openbsd-compat/bsd-poll.c] Remove code left over from debugging. 20050508 - (dtucker) [configure.ac] Check that required programs are found. Pointed out by jj at it.su.se. - (dtucker) [contrib/redhat/openntpd.spec] If ntp user already exists, set its homedir to the chroot dir. From wijnand at nedbsd.nl. - (dtucker) [contrib/redhat/openntpd.spec] Always create privsep dir even if ntp user already exists. Also from Wijnand. 20050530 - (dtucker) [Makefile.in configure.ac mdoc2man.awk] Add support for other man page formats (man and catman), based on OpenSSH's. - (dtucker) [Makefile.in openbsd-compat/Makefile.in] Make out-of-tree builds work. - (dtucker) [Makefile.in openbsd-compat/Makefile.in] Minor cleanups. - (dtucker) [LICENCE] Add Anil Madhavapeddy to atomicio bits. - (dtucker) [version.h] Set version to -current. 20050529 - (dtucker) [openbsd-compat/atomicio.c openbsd-compat/atomicio.h openbsd-compat/bsd-arc4random.c] Sync OpenBSD ssize_t -> size_t atomicio change by avsm@@, update rnd code to new interface. 20050528 - (dtucker) [openbsd-compat/bsd-poll.c] Portability and correctness fixes: - Handle fd == -1 case. - Handle fractional second timeouts correctly (not used in ntpd). - Allow any negative timeout to mean INFTIM. - (dtucker) [configure.ac] For AC_CHECK_HEADERS() and AC_CHECK_FUNCS() have one entry per line to make it easier to merge changes. - (dtucker) [defines.h includes.h openbsd-compat/bsd-poll.c] Copyright bump. - (dtucker) [CREDITS Makefile.in includes.h version.h] Add CVS Id. - (dtucker) [openbsd-compat/asprintf.c] char const -> const char, matches OpenBSD 1.10 -> 1.11. @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.6 2005/06/28 17:13:25 peter Exp $ d3 3 a5 3 SHA1 (openntpd-3.9p1.tar.gz) = 098a435d02886a9e4d34afb15b15fde795eda1e9 RMD160 (openntpd-3.9p1.tar.gz) = c348004116c78810daa9451f15abcc26788949a8 Size (openntpd-3.9p1.tar.gz) = 152700 bytes @ 1.6 log @Update to openntpd-3.7p1. Changes: 20050523 - (dtucker) [configure.ac defines.h] Add flags to allow ntpd to build on AIX, mostly from tomwilliams14 at comcast.net. - (dtucker) [contrib/redhat/openntpd.spec] Specfile update from Bernhard Weisshuhn (bkw at weisshuhn de): - Use 'ntp' (not _ntp) with id 38 as privsep user - Add openssl-devel to Build-Requires - mkdir -p /var/empty/ntpd - Added ChangeLog, README LICENCE and CREDITS as docfiles - removed fluff, use %{_variables} where appropriate - (dtucker) [configure.ac] Fall back to builtin arc4random if we don't find a usable OpenSSL. - (dtucker) [README] Update known-working platforms and misc info. - (dtucker) [README] Add CVS Id. - (dtucker) [configure.ac includes.h] Check for and include arpa/nameser.h, fixes build on Solaris 2.5.1. - (dtucker) [version.h contrib/redhat/openntpd.spec] Enter 3.7p1. 20050313 - (dtucker) OpenBSD CVS Sync - dtucker@@cvs.openbsd.org 2005/01/27 15:44:00 [client.c ntp.c ntpd.h] Scale query interval by the overall offset not per-peer offset, so we don't query outliers more often than any other server. ok henning@@ - dtucker@@cvs.openbsd.org 2005/01/28 13:01:32 [client.c server.c] Make network unreachable errors non-fatal; ok henning@@ - henning@@cvs.openbsd.org 2005/01/28 13:32:24 [ntpd.c] fatal() if daemon() fails, Alexander von Gernler - dtucker@@cvs.openbsd.org 2005/01/28 13:37:20 [client.c ntp.c ntpd.h] Simplify interval scaling and randomize query intervals; ok henning@@ - henning@@cvs.openbsd.org 2005/02/02 19:52:32 [ntpd.c] usage() is __dead pt out by Alexander v Gernler - henning@@cvs.openbsd.org 2005/02/02 19:57:09 [buffer.c ntpd.h] buffer structs and API ssize_t -> size_t; from bgpd - henning@@cvs.openbsd.org 2005/02/02 20:03:52 [ntp.c] KNF - dtucker@@cvs.openbsd.org 2005/02/03 11:53:33 [client.c ntpd.h] Implement simple duplicate suppression of peer errors; ok henning@@ - henning@@cvs.openbsd.org 2005/02/21 18:58:43 [client.c] fix an error message - henning@@cvs.openbsd.org 2005/02/22 13:03:24 [ntp.c] when sending a query already returns a failure, we're not going to see a reply to that query. if we get errors for all queries and the initial settime() is still due and thus the parent process still waits (not yet daemonized!), send an IMSG_SETTIME with offset 0. shortens the delay dramatically when you boot without network idea from a discussion with theo - henning@@cvs.openbsd.org 2005/03/06 19:36:52 [imsg.c] fix error message, Benedikt Steinbusch - henning@@cvs.openbsd.org 2005/03/08 13:31:40 [client.c] let client_query return 0 if it requested dns resolution - henning@@cvs.openbsd.org 2005/03/08 15:28:55 [ntpd.c] from the "shut the fuck up, ntpd" department: move log_debug call to tell about skipping the settime due to lack of answers down slightly below the 2nd (and final) log_init call so it becomes a -d only thing. tested by dlg and me - deraadt@@cvs.openbsd.org 2005/03/08 15:37:16 [ntp.c] missing break spotted by lint - henning@@cvs.openbsd.org 2005/03/08 15:59:36 [config.c] from the "shut the fuck up, ntpd" department: don't whine about temporary dns errors - deraadt@@cvs.openbsd.org 2005/03/08 17:27:14 [ntp.c] knf - henning@@cvs.openbsd.org 2005/03/08 17:33:43 [ntp.c] when trying short-circuit the wait for the first reply for -s, only do so when -we tried to send at least one query (that is the change) -we could not send ou a single one without failure (this was already in place but catched too much) problem independently noticed by nick and danh, ok mickey danh, testing by many - henning@@cvs.openbsd.org 2005/03/09 15:07:00 [imsg.c] when, after processing all complete imsgs we found in the buffer, there are some bytes left (less than an imsg header, or less than the imsg header len field says) we copy it to the very beginning of the buffer. use memmove instead of memcpy since it is not guaranteed that there's no overlap. while memcpy on OpenBSD is safe, it might not elsewhere, and we want our code to be correct anyways. funny enough theo and I talked at length about that last week in dublin, and I said I believe I had no memcpys with the chance of overlap in ntpd/ bgpd - well, here is one, and Alexander von Gernler pointed me to it. - henning@@cvs.openbsd.org 2005/03/09 21:31:11 [config.c ntpd.c] nasty: host_dns used to run before forking and chrooting etc, so it was guaranteed that its res_init() call was done once before fork etc... that is no longer the case. call res_init() in main() early. - dtucker@@cvs.openbsd.org 2005/03/13 11:06:27 [ntpd.c] Fixes in ntpd_settime (ie ntpd -s): - Handle errors from syscalls better - Prevent curtime.tv_usec from being negative for negative offsets. - Don't claim to have done settimeofday if it fails. ok henning@@ (brought to my attention by holger at wizards.de) - (dtucker) [defines.h] defined __dead if the system doesn't. 20050211 - (dtucker) [defines.h] Fix SA_LEN macro for platforms that have different sized sockaddr_in and sockaddr_in6 structs but don't define their own SA_LEN. Patch from Leonardo C. Filho . 20050127 - (dtucker) OpenBSD CVS Sync - henning@@cvs.openbsd.org 2004/12/22 17:04:11 [ntpd.c] d can be negative, take that into account when comparing to the logging threshold. spotted by Constantine Murenin , mickey ok - henning@@cvs.openbsd.org 2004/12/23 17:10:10 [ntp.c] KNF - dtucker@@cvs.openbsd.org 2005/01/27 11:32:29 [client.c ntp.c ntpd.h] Delay before retrying a query on timeout; ok henning@@ 20050109 - (dtucker) [LICENCE] Fix typos and omissions, tidy up formatting. - (dtucker) [LICENCE] Add CVS Id. 20050107 - (dtucker) [LICENCE] Add an OpenSSH-style licence summary. 20041222 - (dtucker) OpenBSD CVS Sync - moritz@@cvs.openbsd.org 2004/12/20 16:10:05 [ntpd.c] some typos in log messages. - henning@@cvs.openbsd.org 2004/12/22 06:34:52 [ntp.c] if our first getpwnam(), testing for NTPD_USER, succeeded, but the second returns NULL, we don't need loooong explanations, but at least some indicator what went wrong, From: Michael Knudsen - dtucker@@cvs.openbsd.org 2004/12/22 06:36:11 [server.c] Save original value returned by getifaddrs to free later; ok henning@@ - (dtucker) [openbsd-compat/uidswap.c] Include includes.h 20041220 - (dtucker) [README] Queries and bug reports to me. - (dtucker) [configure.ac defines.h] on QNX, socklen_t is really size_t. - (dtucker) [configure.ac openbsd-compat/Makefile.in openbsd-compat/port-qnx.c] Add an adjtime() function for QNX, written by Anthony O.Zabelin. 20041219 - (dtucker) [includes.h openbsd-compat/Makefile.in openbsd-compat/atomicio.c openbsd-compat/atomicio.h openbsd-compat/bsd-arc4random.c openbsd-compat/openbsd-compat.h]: Add atomicio from OpenSSH and use for reading entropy sources to ensure complete reads. - (dtucker) [defines.h] Remove some dead code. - (dtucker) [openbsd-compat/bsd-arc4random.c] Use atomicio for write too. 20041218 - (dtucker) [configure.ac ntp.c ntpd.c openbsd-compat/Makefile.in openbsd-compat/bsd-poll.c openbsd-compat/bsd-poll.h openbsd-compat/openbsd-compat.h] Add a poll() replacement built around select() and enable for platforms that don't have poll (eg QNX4). Poll header file from OpenBSD, function written by me, tested on QNX4 by Anthony O.Zabelin. - (dtucker) [configure.ac] Alphabetize system-specific case block. - (dtucker) [configure.ac bsd-misc.c] Add a dummy setgroups() function for platforms that don't have it; from Anthony O.Zabelin. - (dtucker) [configure.ac openbsd-compat/bsd-snprintf.c] Make "long long" support optional. From Anthony O.Zabelin. - (dtucker) [configure.ac defines.h] Define __func__ macro as required, stolen from OpenSSH. - (dtucker) [configure.ac] Add configure-time settings for QNX4. From Anthony O.Zabelin. - (dtucker) [config.c] Add includes.h - (dtucker) [configure.ac includes.h] Check for sys/timers.h and include. - (dtucker) [openbsd-compat/bsd-arc4random.c] Add support for using EGD/PRNGD sockets directly when configured --with-builtin-arc4random. - (dtucker) [openbsd-compat/bsd-arc4random.c] Remove debugging messages. - (dtucker) OpenBSD CVS Sync - dtucker@@cvs.openbsd.org 2004/12/15 00:44:20 [client.c] If polling a server results in an error, drop that server to the maximum poll interval; ok henning@@ - dtucker@@cvs.openbsd.org 2004/12/15 13:24:21 [client.c] Factor out interval scaling code; ok henning@@ - dtucker@@cvs.openbsd.org 2004/12/15 13:29:25 [client.c] Poll unsynchronized servers at the maximum interval and log a message about them when in debug mode; ok henning@@ - dtucker@@cvs.openbsd.org 2004/12/16 01:38:59 [config.c ntpd.h] Limit the number of addresses used by the 'servers' directive to 8; ok henning@@ 20041215 - (dtucker) [includes.h ntpd.c] Fix warnings for RCSID from picky compilers and user RCSID for the release string. Pointed out by Jason Mader. - (dtucker) [includes.h] Undef sa_len macro if it's defined, to prevent name collisions on IRIX. With Jason Mader. - (dtucker) [Makefile.in] Zap a GNUmake-ism, spotted by Jason Mader. - (dtucker) [openbsd-compat/bsd-misc.c openbsd-compat/openbsd-compat.h] Tweak again to prevent warnings. 20041214 - (dtucker) [configure.ac] On IRIX, determine IOV_MAX from sysconf(8), based on info from Jason Mader. - (dtucker) [configure.ac] Move __need_IOV_MAX define into the Linux-specific block, suggested by Jason Mader. - (dtucker) [openbsd-compat/bsd-misc.c] Cast argv0 to char * to keep IRIX's compiler happy. From Jason Mader. - (dtucker) [Makefile.in] Add rules to ensure openbsd-compat gets rebuilt properly. - (dtucker) OpenBSD CVS Sync - jmc@@cvs.openbsd.org 2004/12/07 11:06:12 [ntpd.8] tweaks; - mickey@@cvs.openbsd.org 2004/12/08 16:47:38 [client.c ntp.h ntp_msg.c server.c util.c] uniquely name members of s_fixedpt and l_fixedpt; henning@@ ok - mickey@@cvs.openbsd.org 2004/12/08 18:35:16 [ntp_msg.c] use two tiny macros for copying fields out to simplify reading; henning@@ ok - mickey@@cvs.openbsd.org 2004/12/09 21:24:46 [client.c ntpd.h] define TRUSTLEVEL_MAX for the trustedlevel value of 10; henning@@ ok - jaredy@@cvs.openbsd.org 2004/12/10 04:54:18 [ntpd.8] typos, then -> than, from Michael Knudsen - dtucker@@cvs.openbsd.org 2004/12/13 13:22:52 [client.c ntp.h] Discard replies with alarm flag set or invalid stratum; ok henning@@ - dtucker@@cvs.openbsd.org 2004/12/13 13:36:02 [ntp.c] Check for error status from poll() too; ok henning@@ - dtucker@@cvs.openbsd.org 2004/12/14 07:27:13 [ntp_msg.c] sendto() takes socklen_t as an argument; ok henning@@ 20041213 - (dtucker) [openbsd-compat/asprintf.c] unsigned char -> char, silences warning from IRIX's compiler. From Jason Mader (jason at ncac gwu edu). 20041212 - (dtucker) [ntpd.8] Remove some OpenBSD-specific references from the man page. From Christian Gut (cycloon at is-root org). - (dtucker) [configure.ac] Add defines needed for uid swapping functions to work on IRIX. From Jason Mader (jason at ncac gwu edu). @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.5 2005/02/24 12:13:58 agc Exp $ d3 3 a5 3 SHA1 (openntpd-3.7p1.tar.gz) = 8d6739a210906f0305606e8c144f5ea7daf737b2 RMD160 (openntpd-3.7p1.tar.gz) = e7613e64ef3349cec2b34293b8cc749eb671c29f Size (openntpd-3.7p1.tar.gz) = 136251 bytes @ 1.5 log @Add RMD160 digests. @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.4 2005/01/07 09:00:51 peter Exp $ d3 3 a5 3 SHA1 (openntpd-3.6.1p1.tar.gz) = bf8e10ab31d26923e57dd4d83413e95ea3b62fee RMD160 (openntpd-3.6.1p1.tar.gz) = 70eb2673c1cc91ca483f5183a8fb57870c6a58ec Size (openntpd-3.6.1p1.tar.gz) = 123811 bytes @ 1.4 log @Update to 3.6.1p1 (ok wiz). Changelog: 20041209 - (dtucker) [version.h] Release 3.6.1p1. 20041208 - (dtucker) [Makefile.in configure.ac] Add --with-privsep-path configure option, based on patch from Andrew Stribblehill (ads at debian org). - (dtucker) [Makefile.in configure.ac] Strip installed binaries by default, add --disable-strip configure option, taken from OpenSSH. Noticed by otto@@ 20041207 - (dtucker) OpenBSD CVS Sync - mickey@@cvs.openbsd.org 2004/12/06 17:52:33 [ntpd.h] ensure the most excellent alignment in the structs; henning@@ ok - mickey@@cvs.openbsd.org 2004/12/06 21:57:17 [ntpd.8 ntpd.c ntpd.h] do not log tiny local clock drifts; w/ help from Joerg Sonnenberger ; henning@@ ok 20041204 - (dtucker) OpenBSD CVS Sync - jmc@@cvs.openbsd.org 2004/11/07 22:42:33 [ntpd.conf.5] document that keywords can be specified multiple times; from otto and myself; prodded by henning; - otto@@cvs.openbsd.org 2004/11/08 20:09:19 [ntpd.conf.5] Advice user to use multiple servers. Prodded by Daniel Polak, help and ok jmc@@ ok henning@@ - henning@@cvs.openbsd.org 2004/11/10 12:27:54 [ntpd.c ntpd.h parse.y] const'ify conffile From: Joerg Sonnenberger - henning@@cvs.openbsd.org 2004/11/10 12:47:28 [client.c ntp.c ntpd.h] ntp_adjtime() -> priv_adjtime() ntp_settime() -> priv_settime() ntp_host_dns() -> priv_host_dns() - henning@@cvs.openbsd.org 2004/11/12 18:24:52 [ntp.c ntpd.h util.c] some missing includes, from Joerg Sonnenberger - henning@@cvs.openbsd.org 2004/11/25 07:27:41 [parse.y] fix "listen on hostname" fallout from the deferred dns lookups noticed by dhartmei@@ - (dtucker) [y.tab.c] Regen. 20041203 - (dtucker) [ntpd.c openbsd-compat/bsd-misc.c openbsd-compat/openbsd-compat.h] Correctly initialise __progname on platforms that don't have it natively, based on OpenSSH's ssh_get_progname(). Reported by ihsan at dogan.ch. 20041106 - (dtucker) [client.c] Back out portable-specific SA_LEN bits. - (dtucker) OpenBSD CVS Sync - henning@@cvs.openbsd.org 2004/11/05 15:28:29 [parse.y] memleaks in error pathes, patrick latifi, Thanks! - dtucker@@cvs.openbsd.org 2004/11/06 00:39:46 [client.c] Use SA_LEN() instead of ss.ss_len. Evaluates to the same result but it's easier on portable. ok henning@@ 20041105 - (dtucker) [configure.ac ntpd.c] Remove workaround for signal(SIGCHLD, SIG_IGN) on Linux. - (dtucker) OpenBSD CVS Sync - henning@@cvs.openbsd.org 2004/11/02 19:00:38 [ntpd.8] superfluous comma, From: James Herbert - henning@@cvs.openbsd.org 2004/11/05 00:04:22 [ntpd.c] use SIG_DFL instead of SIG_IGN when we are not interested in SIG_CHILD anymore, same thing for us and it makes darren's life easier for the portable - (dtucker) [configure.ac ntpd.h] Add a --with-privsep-user option to configure. 20041103 - (dtucker) [configure.ac] Check for snprintf too. - (dtucker) [ntpd.8] Remove references to OpenBSD-specific startup files, from Christian Gut (cycloon at is-root org). 20041028 - (dtucker) [openbsd-compat/bsd-misc.c] Use precision from adjtimex for clock_getres. 20041027 - (dtucker) OpenBSD CVS Sync - henning@@cvs.openbsd.org 2004/10/27 10:55:27 [ntp.c] use clock_getres(3) and calculate precision from that, and fill the precision field when we reply in server mode accordingly. from phessler - dtucker@@cvs.openbsd.org 2004/10/27 14:19:12 [ntp.c] Calculate Hz and round up; ok henning@@ - (dtucker) [configure.ac openbsd-compat/bsd-misc.c openbsd-compat/openbsd-compat.h] Add clock_getres compat function. 20041026 - (dtucker) [configure.ac includes.h openbsd-compat/bsd-misc.c openbsd-compat/openbsd-compat.h] Add vsyslog() to compat library. - (dtucker) [configure.ac openbsd-compat/Makefile.in openbsd-compat/bsd-snprintf.c] Import snprintf replacement from OpenSSH Portable. - (dtucker) [configure.ac defines.h] Add a few definitions needed to compile on older Solaris version. - (dtucker) [README] Update for Solaris. - (dtucker) [configure.ac] Look for socklen_t in - (dtucker) [configure.ac includes.h] Include , do better checking for socklen_t. - (dtucker) [openbsd-compat/openbsd-compat.h] Add prototypes for snprintf and vsnprintf. - (dtucker) [configure.ac defines.h] Use sockaddr_storage.__ss_family where available. 20041023 - (dtucker) OpenBSD CVS Sync - henning@@cvs.openbsd.org 2004/09/14 22:01:28 [client.c] paranoia: reset query->fd to -1 after close, from canacar some time ago - henning@@cvs.openbsd.org 2004/09/15 00:05:29 [buffer.c] remove buf_write(), not used in ntpd. found by theo - henning@@cvs.openbsd.org 2004/09/15 00:07:20 [ntp.c] missing include, from theo - henning@@cvs.openbsd.org 2004/09/15 00:08:06 [ntp.c ntpd.c] unused variables, theo - henning@@cvs.openbsd.org 2004/09/15 00:18:12 [ntpd.h parse.y] remove the unused variable/macro code, ok theo - henning@@cvs.openbsd.org 2004/09/15 00:23:08 [parse.y] kill another unused function and two debugging printfs - henning@@cvs.openbsd.org 2004/09/15 19:14:11 [ntp.c ntpd.c] malloc the imsg buffers instead of having them statically, suggested by micsky some time ago, ok otto - henning@@cvs.openbsd.org 2004/09/15 19:21:25 [imsg.c ntp.c ntpd.c ntpd.h] imsg framework cleanup: -kill the _pid flavors of imsg_create and imsg_compose, and just add pid as argument to those -use imsg_create in imsg_compose instead of duplicating code -check for datalen overflow - henning@@cvs.openbsd.org 2004/09/15 19:22:55 [imsg.c] need buf_free() to free buf, free() is not good enough - henning@@cvs.openbsd.org 2004/09/16 01:02:37 [imsg.c] ewps... - henning@@cvs.openbsd.org 2004/09/16 01:06:51 [imsg.c] use imsg_add instead of the lower level buf_add in imsg_create; it already does the error checking for us. - henning@@cvs.openbsd.org 2004/09/16 01:10:05 [imsg.c] in imsg_compose: -don't buf_free() on imsg_add() errors, it already does that for us -use imsg_close() instead of buf_close(), does error handling already - henning@@cvs.openbsd.org 2004/09/16 01:13:42 [imsg.c ntpd.h] the "type" param to imsg_compose and imsg_create is really an enum imsg_type and not an int - henning@@cvs.openbsd.org 2004/09/18 07:33:14 [ntp.c ntpd.h] do not bother overallocating and shrinking the pfd and idx2peer arrays, doesn't by us anything. discussed with ryan during dinner at original joe's - henning@@cvs.openbsd.org 2004/09/18 20:01:38 [client.c ntp.c ntpd.8 ntpd.c ntpd.h] add a new -s option, that tells ntpd to set the time using settimeofday() once at startup. ntpd delays daemonizing until it has done the intial time setting (or ran into the timeout) in this mode to make sure stuff started later in rc is not subject to time jumps. this eleminates the need to run rdate -n beforehands. with some input from & ok ryan and bob, march music from mickey - henning@@cvs.openbsd.org 2004/09/18 20:27:57 [ntpd.c ntpd.h] don't call settimeofday() when the offset is smaller than 180 seconds, adjtime() will fix that fast enough, from discussion in theo's living room ok mcbride beck - henning@@cvs.openbsd.org 2004/09/18 20:31:46 [ntpd.8] say when we run settimeofday() with -s and when not, help from bob - henning@@cvs.openbsd.org 2004/09/18 20:37:12 [ntpd.8 ntpd.c] implement -S to override earlier -s, requested by theo - henning@@cvs.openbsd.org 2004/09/18 23:21:35 [ntpd.c] jmc says S before s and not s before S, sssssssso we do. - henning@@cvs.openbsd.org 2004/09/18 23:22:13 [ntpd.8] greatly improved by jmc with some tweaks by yours truly - henning@@cvs.openbsd.org 2004/09/23 01:53:07 [ntpd.c] reset chld_pid to 0 when acting upon a SIGCHLD so we don't try to send it a kill then - tiny possible race there pointed out by Brian Poole - henning@@cvs.openbsd.org 2004/09/24 14:51:16 [client.c ntp_msg.c] connect() the client-side sockets. idea & test & ok camield@@ - henning@@cvs.openbsd.org 2004/09/30 10:19:43 [client.c] now that we connect() the client sockets we need to handle ECONNREFUSED as non-fatal too, from camield@@ - henning@@cvs.openbsd.org 2004/10/04 11:12:58 [ntp.c] do not take the average offset from all peers when calculating the total offset to correct the local clock, but use the median. given a reasonable sized set of servers this makes us nearly immune against outliers or flasetickers, without the need for a horribly complicated outliers detection which does not yield to better results anyway. - henning@@cvs.openbsd.org 2004/10/05 11:23:28 [client.c] in client_addr_init() and client_nextaddr(), do not set up the socket and connect it, instead leave it at -1. in client_query, set up and connect the socket if it is -1. and, the real reason for this change: handle connect failures gracefully ok otto - henning@@cvs.openbsd.org 2004/10/08 12:42:25 [client.c] whitespace both in comment; from bernd - henning@@cvs.openbsd.org 2004/10/13 09:20:41 [ntp.c] when we get back a IMSG_HOST_DNS message from the parent the peer ID within might have become invalid (because the peer showed up, dns request sent to parent, peer vanishes, and then the reply comes back), so do not fatal() in that case but just log_warnx(). provoked by brad - henning@@cvs.openbsd.org 2004/10/13 12:22:39 [ntp.c server.c] correctly set refid in replies with NTP protocol versions < 4. code path for NTP4 remains unchanged, we already set refid correctly there. NTP3 and older uses an IPv4 address as refid. use the IP of the server we last synced to if it was a IPv4 one. sometimes we use the average offset between two, in that case just pick one for the IP. this scheme naturally fails when we query IPv6 servers and have to reply to IPv4 NTP3 (or even older NTP versions) clients - refid stays at 0 then. this is a protocol limitation, nothing we can do about it. - henning@@cvs.openbsd.org 2004/10/13 12:37:47 [ntp_msg.c] fall cleaning - henning@@cvs.openbsd.org 2004/10/13 13:19:44 [client.c] thinko, htonl() -> ntohl(). as we don't use the value in question effect zero - henning@@cvs.openbsd.org 2004/10/13 13:35:19 [client.c ntp.h ntp_msg.c] in struct ntp_msg, rename "distance" to "rootdelay" to closer match RFCs and such - henning@@cvs.openbsd.org 2004/10/13 14:02:50 [ntp.c server.c] set rootdelay in replies. inherit rootdelay from the delay from the last client update from the peer that we picked last time to adjust the local clock. in some cases we use the average offset between two peers' client updates, then use the average delay between the two as well. - dtucker@@cvs.openbsd.org 2004/10/14 09:35:48 [client.c ntpd.h server.c] Have ntpd use IPTOS_LOWDELAY; ok henning@@ - dtucker@@cvs.openbsd.org 2004/10/15 01:58:04 [client.c server.c] Only set IPTOS_LOWDELAY on IPv4 interfaces; pointed out by phessler, ok henning - henning@@cvs.openbsd.org 2004/10/22 21:17:37 [client.c ntp.c ntp_msg.c ntpd.h server.c] in server mode reply with stratum from the peer that we currently prefer plus one - henning@@cvs.openbsd.org 2004/10/22 21:24:20 [ntp_msg.c] oups - (dtucker) [client.c] Use SA_LEN instead of ss_len. - (dtucker) [ntpd.c] Move seed_rng earlier. - (dtucker) [includes.h ntpd.c version.h] Add a version identifier. - (dtucker) [configure.ac ntp.c] Test for the presence of - (dtucker) [defines.h] Define MAX() macro if not already defined. - (dtucker) [ntpd.c] Add SCCS tag marker so 'what' works too. @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.3 2004/11/19 14:15:56 peter Exp $ d4 1 @ 1.3 log @Update to 3.6p1, ok wiz@@ Changes: 20041022 - (dtucker) Release 3.6p1. 20041015 - (dtucker) [configure.ac openbsd-compat/inet_pton.c] Fix a couple of silly errors that prevented it from working on OS X; from mouring@@ 20041014 - (dtucker) configure.ac defines.h includes.h openbsd-compat/Makefile.in openbsd-compat/fake-rfc2553.c openbsd-compat/fake-rfc2553.h openbsd-compat/inet_pton.c openbsd-compat/openbsd-compat.h] Add support for platforms that do not have a native getaddrinfo interface, based on OpenSSH's compatibility interface and OpenBSD's inet_pton. - (dtucker) [openbsd-compat/openbsd-compat.h openbsd-compat/bsd-misc.c] Compat functions for seteuid and setegid from OpenSSH. ntpd will now work on HP-UX. - (dtucker) [Makefile.in openbsd-compat/Makefile.in openbsd-compat/openbsd-compat.h] Set CPPFLAGS so older make's work. - (dtucker) [config.c configure.ac] Check for sin6_scope_id. - (dtucker) [openbsd-compat/fake-rfc2553.h] remove sin6_scope_id to re-sync with OpenSSH. - (dtucker) [README] Update. 20041003 - (dtucker) [openbsd-compat/asprintf.c] Ensure than string is freed if vsnprintf fails. 20041002 - (dtucker) [configure.ac] Look for res_9_init in libresolv too, needed on Mac OS X. From samh at granada-learning com. - (dtucker) [configure.ac includes.h] Check for and include netdb.h, prevents "redefinition of EAI_NODATA" errors. 20040912 - (dtucker) OpenBSD CVS Sync - henning@@cvs.openbsd.org 2004/09/07 22:43:07 [server.c] ignore ntp_sendmsg()s return value in server_dispatch. could result in ntpd exiting on sendmsg() failures, which is not desired. - henning@@cvs.openbsd.org 2004/09/09 21:50:33 [ntp.c] correctly track peer count. fixes a memory corruption. with & ok otto millert claudio, ok deraadt canacar 20040904 - (dtucker) [defines.h] FreeBSD 5.x does not have EAI_NODATA, so define to EAI_NONAME. From naddy at mips.inka.de. - (dtucker) [configure.ac openbsd-compat/bsd-arc4random.c] Add support for building without OpenSSL (./configure --with-builtin-arc4random), based on arcfour routines from nanocrypt by Damien Miller. Requires /dev/urandom device. - (dtucker) [configure.ac ntpd.c] Set SIGCHLD to SIG_DFL on Linux. 20040901 - (dtucker) OpenBSD CVS Sync - henning@@cvs.openbsd.org 2004/08/24 15:23:19 [config.c ] don't fatal() if getaddrinfo() returns EAI_NONAME - deraadt@@cvs.openbsd.org 2004/08/30 11:50:56 [ntp_msg.c] ENOBUFS, EHOSTUNREACH, ENETDOWN and EHOSTDOWN are bad reasons to log; ok otto henning - deraadt@@cvs.openbsd.org 2004/08/30 11:52:04 [config.c] skip early DNS lookups -- they are deferred to later; ok otto ho henning - henning@@cvs.openbsd.org 2004/08/30 12:02:59 [config.c] don't forget to set *hn... theo ok - (dtucker) [README] Update platforms. - (dtucker) [configure.ac] Add product name to AC_INIT 20040825 - (dtucker) [ntpd.conf] Sync with OpenBSD, requested by henning@@. @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.2 2004/10/23 10:26:15 peter Exp $ d3 2 a4 2 SHA1 (openntpd-3.6p1.tar.gz) = 3dfd64471ddc92b06d4098a9f4c0e979c1acfd54 Size (openntpd-3.6p1.tar.gz) = 114924 bytes @ 1.2 log @Upgrade to 20040824p. Changes: 20040820 - (dtucker) [defined.h] Newer FSF bisons will create a y.tab.c that has conflicting definitions of YYSTYPE. Defining YYSTYPE_IS_DECLARED keeps it happy. Noted by Q at ping.be. - (dtucker) [removed ntpd.cat8 ntpd.conf.cat5] Remove catman pages. Noted by by Q at ping.be. - (dtucker) [configure.ac ntpd.c] Prevent Linux kernel from whining about signal(SIGCHLD, SIG_IGN) + wait(). - (dtucker) OpenBSD CVS Sync - henning@@cvs.openbsd.org 2004/08/10 12:41:15 [config.c ntpd.h parse.y ] move memory allocation for new peers into a new function, makes ID allocation easier - henning@@cvs.openbsd.org 2004/08/10 12:45:27 [parse.y ] in the pool case ("servers somepool.somewhere"), we add new peers while looping over the addresses returned by the dns lookup, as each address is one new peer. however, if the lookup fails with a temporary error, we will try to lookup later again. for that, we obviously need to insert one peer with the hostname in addr_head... change one for() loop into a do { } while() one - henning@@cvs.openbsd.org 2004/08/10 19:17:10 [ntp_msg.c ] wrong sizeof; Brian Poole - henning@@cvs.openbsd.org 2004/08/10 19:18:23 [buffer.c ] order #includes, Brian Poole - henning@@cvs.openbsd.org 2004/08/12 16:33:59 [client.c config.c ntp.c ntpd.c ntpd.h ] do not try to getaddrinfo() in the unprivileged process, send an imsg asking the privileged one to do it. sends back an imsg with the resulting addresses in a bunch of struct sockaddr_storage in the data part. this should fix all remaining issues with dns (non-)availability at ntpd startup, be it due to named on localhost or something else. tested by marco@@ and Chris Paul - otto@@cvs.openbsd.org 2004/08/13 12:26:13 [client.c ] Reset deadline on failed transmit. Avoids a spinning process if all sends fail. ok henning@@ - otto@@cvs.openbsd.org 2004/08/16 11:14:15 [client.c ] Be more careful setting next and deadline, they should not both be != 0 at the same time. ok henning@@ - (dtucker) [configure.ac] libresolv now needed on some platforms (eg Solaris). 20040730 - (dtucker) OpenBSD CVS Sync - henning@@cvs.openbsd.org 2004/07/25 18:27:58 [config.c ntpd.h ] remove unused function - henning@@cvs.openbsd.org 2004/07/28 16:38:43 [client.c config.c ntpd.h parse.y ] when a dns lookup fails at parse time, do not abort but try again to resolve the hostname every 60 seconds fixes ntpd invocations before e. g. a dialup link is established and such. as we want ntpd to be a "fire and forget" background daemon it should cope with such situations. tested by many - henning@@cvs.openbsd.org 2004/07/28 16:56:21 [parse.y ] prevent unresolvable hostnames in "listen on" statements - henning@@cvs.openbsd.org 2004/07/29 11:01:48 [ntpd.h parse.y ] keep an ID per server we talk to 20040721 - (dtucker) OpenBSD CVS Sync - henning@@cvs.openbsd.org 2004/07/20 16:47:55 [client.c ntpd.h parse.y ] wrap the heads for the linked list of addresses into a new ntp_addr_wrap which, besides the head pointer for the list of course, stores the original address as specified (i. e. as hostname instead of resolved IPs) and flags and such. - henning@@cvs.openbsd.org 2004/07/21 09:40:55 [parse.y ] no multiple free(); "John L. Scarfone" - (dtucker) [Makefile.in] rebuild y.tab.c during distprep too. 20040720 - (dtucker) [Makefile.in] Set @@CC@@ too. @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.1.1.1 2004/07/19 19:17:25 xtraeme Exp $ d3 2 a4 2 SHA1 (openntpd-20040824p.tar.gz) = 2e7fac5504f0760c922e673ec2397b9e6356272c Size (openntpd-20040824p.tar.gz) = 105638 bytes @ 1.1 log @Initial revision @ text @d1 1 a1 1 $NetBSD$ d3 2 a4 2 SHA1 (openntpd-20040719p.tar.gz) = 818bb0da6de374c69ec1e909079427f12b332dba Size (openntpd-20040719p.tar.gz) = 105460 bytes @ 1.1.1.1 log @Initial import of openntpd-20040719p from pkgsrc-wip, contributed by Peter Postma. OpenNTPd is a free implementation of the Network Time Protocol. It provides the ability to sync the local clock to remote NTP servers and can act as NTP server itself, redistributing the local clock. OpenNTPd is primarily developed by Henning Brauer and Alexander Guy as part of the OpenBSD Project. The portable version is made by Darren Tucker. The software and is freely useable and re-useable by everyone under a BSD license. @ text @@