NTPsec 1.2.5 released
Hal Murray
halmurray at sonic.net
Fri Jul 31 07:07:24 UTC 2026
Thanks. Congrats.
> Note: Python 2 and OpenSSL 1.1.0 support will be removed in the next release.
I was expecting we would get rid of 1.1.1 too. Was that a typo and/or
what is your plan?
------
NIST's NTP Shared Key Authentication now supports SHA256 and HMAC-SHA256
https://www.nist.gov/pml/time-and-frequency-division/time-services/nist-authenticated-ntp-service
SHA256 is a simple digest like MD5 and SHA1. It already works with our existing code.
I was working on adding HMAC support. That will be significantly simpler if I don't have to support versions before 3.x.x.
I think it would be reasonably easy to add a compile time switch to drop support for shared authentication, like we have for --disable-nts. That would let ntpd keep working on really old gear as long as you didn't need NTS or shared keys. to work.
--
These are my opinions. I hate spam.
More information about the devel
mailing list