Tangle - cookie keys file

Richard Laager rlaager at wiktel.com
Thu Mar 7 21:00:44 UTC 2019


On 3/7/19 2:44 PM, Hal Murray via devel wrote:
> Gary said:
>> My idiosyncratic read of the FHS would, by default, put the master keys in
>> /usr/local/var/lib: 
> 
> Is that a typo?  There is no /usr/local/var/ or /usr/var/ on Fedora or Debian.

It might be reasonable to default to $PREFIX/var/lib, such that a
default PREFIX of /usr/local results in /usr/local/var/lib. (Consider
also the cases of PREFIX being "/opt" or "/home/USERNAME/.local".) But a
system package would most likely set PREFIX to /usr and this setting to
/var/lib (not /usr/var/lib).

> The server side needs 3 files:
>   cookie keys
>   certificate
>   private key for certificate
> 
> The certificate and private key can live in /etc/ntp/ -- they don't get > updated by ntpd.

Agreed.

> We could give up on defaults for all of them.  Then the documentation wouldn't 
> have to discuss defaults.

Documentation isn't a problem. The docs can and should get the same waf
subst behavior anyway. So the docs should always mention the paths that
match how I built my ntpd.

-- 
Richard


More information about the devel mailing list