[Git][NTPsec/ntpsec][master] 6 commits: nts.adoc: Capitalize a MUST

[Gary E. Miller]

Yo Richard!

On Fri, 08 Feb 2019 00:26:27 +0000
Matt Selsky via vc <vc at ntpsec.org> wrote:

> dc2827a3 by Richard Laager at 2019-02-07T18:42:59Z
> nts.adoc: Make AEAD_AES_SIV_CMAC_256 not implicit
> 
> If the user specifies a NTPCipherSuite string, they need to include
> AEAD_AES_SIV_CMAC_256 if they want it.  Otherwise, if it is implicit,
> as the document previous said, this would preclude the user from
> disabling AEAD_AES_SIV_CMAC_256 in the future, should that become
> necessary.

The traditional way that OpenSSL, and its users (Apache, nginx, postfix,
sendmail, etc.) hand this is with the "!" operator.

Then you can do things, like:
	NTPCipherSuite "HIGH:!AEAD_AES_SIV_CMAC_256"

RGDS
GARY
---------------------------------------------------------------------------
Gary E. Miller Rellim 109 NW Wilmington Ave., Suite E, Bend, OR 97703
	gem at rellim.com  Tel:+1 541 382 8588

	    Veritas liberabit vos. -- Quid est veritas?
    "If you can’t measure it, you can’t improve it." - Lord Kelvin
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 851 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ntpsec.org/pipermail/devel/attachments/20190207/6befab29/attachment.bin>