<!doctype html>
<html>
<head>
<meta charset="UTF-8">
</head>
<body>
<div class="default-style">
Hal Murray <halmurray@sonic.net> wrote:
</div>
<div class="default-style">
> Some commands in ntpq require authentication.
</div>
<div class="default-style">
</div>
<div class="default-style">
> I just tried it, and it wants an MD5 password. MD5 is way old. Is there a way to switch to AES?
</div>
<div class="default-style">
</div>
<div class="default-style">
The default is set to MD5 in ntpq:69 and packet.py:729; might I suggest updating it to 'AES-256' or "SHA{,3-}512"? They would get truncated until (presumably) NTPv5 comes in and replace the authentication trailer with an extension.
</div>
<div class="default-style">
</div>
<div class="default-style">
The keytype command(?) is also available via ntpq -c "keytype AES-256" and the 'keyid' command to go with it. Help is in the usual places.
</div>
</body>
</html>