NTS update

[Gary E. Miller]

Yo Hal!

On Fri, 22 Mar 2019 14:14:19 -0700
Hal Murray via devel <devel at ntpsec.org> wrote:

> > > > 2019-03-22T12:55:52 ntpd[10362]: DNS: Server skipping:
> > > > 2001:470:e815::23  
> 
> > Looking at this again, when kong connects to pi3, there is no
> > duplicate connection.  
> 
> Then where did that skipping come from?  Either there is some other
> server slot that has that IP Address, or the NTS path ran previously
> and filled it in but something didn't take.  The retry path does
> happen, but I think it clears out the old IP Address.

No idea...

> Try grepping the log files for that IP address.

Already did.  No duplicates.  Easy to do as I only need two minutes
of uptime to see the issue.

I can make the logs available online if you wish.

> > But, I still want that option.   
> 
> You aren't going to get it in the short term.  I'm focused on things
> that might be useful for the weekend hackathon.

Fair enough.  My 4 servers are listed on the hackathon page, with your
code of course.  No other servers yet.

> In the long term...  When a packet comes in, it does a hash lookup.
> We'd need to add the NTS bit (and shared key number?) to that
> hashing.  I think everything else just works from there.

What ever works.  I can live without it.  I just connect to two
different IPs on the chimer.  One IPv4 and nts, the other IPv6 and
no nts.  Hopefully a reverse dns name clash is OK.

RGDS
GARY
---------------------------------------------------------------------------
Gary E. Miller Rellim 109 NW Wilmington Ave., Suite E, Bend, OR 97703
	gem at rellim.com  Tel:+1 541 382 8588

	    Veritas liberabit vos. -- Quid est veritas?
    "If you can’t measure it, you can’t improve it." - Lord Kelvin
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 851 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ntpsec.org/pipermail/devel/attachments/20190322/3c4427f0/attachment.bin>