Re: ntpd 4.1

2001-08-05 Thread Mark Murray

> According to Mark Murray:
> > Can you make it so that if NO_OPENSSL is not defined, then openssl is used?
> 
> I could of course but I don't think that having PUBKEYS by defaults (X.509
> based, not the PGP ones) is probably not very useful yet as it is a fairly
> recent option.
> 
> AUTOKEY should be enough. Any objection?

No objection from me :-)

M
-- 
Mark Murray
Warning: this .sig is umop ap!sdn

To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message



Re: ntpd 4.1

2001-08-05 Thread Sheldon Hearn



On Sat, 04 Aug 2001 17:20:05 -0400, Mixtim wrote:

> > Ha, you think that's bad. Mills doesn't want to be bothered to change his
> > ways to use any sort of revision control. That's how set in his ways he
> > is. Almost as bad as Linus.
> 
>   :pserver:[EMAIL PROTECTED]:/cvs/ntp
> 
> You can checkout modules 'ntp' or 'ntpfaq'.
> 
> Been there for a rather long time.

That's totally irrelevant.  David Mills doesn't make use of CVS.
Someone else checks his changes in.  Particularly in the documentation,
these checkins consist of megacommits that mix sweeping content changes
with massive tidy(1) style changes.

Ciao,
Sheldon.

To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message



Re: ntpd 4.1

2001-08-04 Thread Kris Kennaway

On Thu, Aug 02, 2001 at 12:25:13PM +0200, Ollivier Robert wrote:
> Now that ntpd 4.1.0 has been released (finally!), I'll upgrade current very
> soon.
> 
> The question I have is the following: authentication was done with md5 code
> builtin and I disabled DES support (not supported anymore). Now, with 4.1,
> it can be linked to openssl but it is still an optional component.
> 
> I'm a bit reluctant to force openssl for just ntpd.
> 
> Any ideas / comments ?

What we do for a number of other system components that can be built
with/without openssl/crypto support is to select that based on
NO_OPENSSL (and some other -- semi-redundant -- checks), and make sure
it's built twice in make release.  Look at release/Makefile and the
ppp and tcpdump code to see how it's done.

Kris

 PGP signature


Re: ntpd 4.1

2001-08-04 Thread Ollivier Robert

According to Mark Murray:
> Can you make it so that if NO_OPENSSL is not defined, then openssl is used?

I could of course but I don't think that having PUBKEYS by defaults (X.509
based, not the PGP ones) is probably not very useful yet as it is a fairly
recent option.

AUTOKEY should be enough. Any objection?
-- 
Ollivier ROBERT -=- FreeBSD: The Power to Serve! -=- [EMAIL PROTECTED]
FreeBSD keltia.freenix.fr 5.0-CURRENT #80: Sun Jun  4 22:44:19 CEST 2000

To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message



Re: ntpd 4.1

2001-08-04 Thread Ollivier Robert

According to Gordon Tetlow:
> >From what I gather (and the cvs repo seems to back up) is that Mills has
> never actually committed a thing. Harlan Stenn does most of the CVS work.

That's correct.
-- 
Ollivier ROBERT -=- FreeBSD: The Power to Serve! -=- [EMAIL PROTECTED]
FreeBSD keltia.freenix.fr 5.0-CURRENT #80: Sun Jun  4 22:44:19 CEST 2000

To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message



Re: ntpd 4.1

2001-08-04 Thread Gordon Tetlow

On Sat, 4 Aug 2001, Mixtim wrote:

> On Sat, Aug 04, 2001 at 02:03:10PM -0700, Gordon Tetlow wrote:
> > Ha, you think that's bad. Mills doesn't want to be bothered to change his
> > ways to use any sort of revision control. That's how set in his ways he
> > is. Almost as bad as Linus.
>
>   :pserver:[EMAIL PROTECTED]:/cvs/ntp
>
> You can checkout modules 'ntp' or 'ntpfaq'.
>
> Been there for a rather long time.

Actually, I was talking with the guy that manages the cvs repo for it.
>From what I gather (and the cvs repo seems to back up) is that Mills has
never actually committed a thing. Harlan Stenn does most of the CVS work.

-gordon


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message



Re: ntpd 4.1

2001-08-04 Thread Mixtim

On Sat, Aug 04, 2001 at 02:03:10PM -0700, Gordon Tetlow wrote:
> Ha, you think that's bad. Mills doesn't want to be bothered to change his
> ways to use any sort of revision control. That's how set in his ways he
> is. Almost as bad as Linus.

  :pserver:[EMAIL PROTECTED]:/cvs/ntp

You can checkout modules 'ntp' or 'ntpfaq'.

Been there for a rather long time.

To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message



Re: ntpd 4.1

2001-08-04 Thread Gordon Tetlow

On Fri, 3 Aug 2001, Sheldon Hearn wrote:

> On Fri, 03 Aug 2001 10:18:49 +0200, Sheldon Hearn wrote:
>
> So let me guess.  Not only does Mills think that the web is the only
> sensible distribution medium for documentation, he also thinks that
> English is the only sensible language for it?

Ha, you think that's bad. Mills doesn't want to be bothered to change his
ways to use any sort of revision control. That's how set in his ways he
is. Almost as bad as Linus.

-gordon


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message



ntpd 4.1

2001-08-03 Thread Garrett Wollman

< said:

> The question I have is the following: authentication was done with md5 code
> builtin and I disabled DES support (not supported anymore). Now, with 4.1,
> it can be linked to openssl but it is still an optional component.

I'd like to have the AUTOKEY functionality available if at all
possible.

-GAWollman


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message



Re: ntpd 4.1

2001-08-03 Thread Sheldon Hearn



On Fri, 03 Aug 2001 08:52:19 +0200, Ollivier Robert wrote:

> > Unless David Mills can be convinced to manage his documentation in a
> > sensible fashion, this will be the last upgrade for which I'll be doing
> > HTML -> mdoc transcription.
> 
> Don't hold your breath then, he repeated two days ago he didn't want to
> change the way he manages the documentation.

I hold my breath for very little, these days. :-)

What blows my mind is that he's not even willing to use slightly more
translatable markup.  He's just totally anti anything other than his own
paradigm, which is that local documentation is dead and the web is the
only place to put it. *mutter*

Ciao,
Sheldon.

Sheldon Hearn
Prime Apostle of the Church of Disillusioned Saints

To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message



Re: ntpd 4.1

2001-08-03 Thread Ollivier Robert

According to Garrett Wollman:
> I'd like to have the AUTOKEY functionality available if at all
> possible.

Goodnews: the first run I've done of configure with --with-crypto=autokey
give me no dependencies on openssl (which is necessary for public key
stuff).

-- 
Ollivier ROBERT  -=-  Eurocontrol EEC/ITM  -=-  [EMAIL PROTECTED]
FreeBSD caerdonn.eurocontrol.fr 5.0-CURRENT #46: Wed Jan  3 15:52:00 CET 2001

To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message



Re: ntpd 4.1

2001-08-03 Thread Maxim Sobolev

Maxim Sobolev wrote:

> Ollivier Robert wrote:
>
> > Now that ntpd 4.1.0 has been released (finally!), I'll upgrade current very
> > soon.
> >
> > The question I have is the following: authentication was done with md5 code
> > builtin and I disabled DES support (not supported anymore). Now, with 4.1,
> > it can be linked to openssl but it is still an optional component.
> >
> > I'm a bit reluctant to force openssl for just ntpd.
> >
> > Any ideas / comments ?
>
> Why not to use libmd5?

libmd I meant.

-Maxim


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message



Re: ntpd 4.1

2001-08-03 Thread Mark Murray

> Now that ntpd 4.1.0 has been released (finally!), I'll upgrade current very
> soon.

:-) :-) :-)

> The question I have is the following: authentication was done with md5 code
> builtin and I disabled DES support (not supported anymore). Now, with 4.1,
> it can be linked to openssl but it is still an optional component.
> 
> I'm a bit reluctant to force openssl for just ntpd.

Can you make it so that if NO_OPENSSL is not defined, then openssl is used?

M
-- 
Mark Murray
Warning: this .sig is umop ap!sdn

To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message



Re: ntpd 4.1

2001-08-03 Thread Ollivier Robert

According to Maxim Sobolev:
> libmd I meant.

That's a possibility but it already has its own md5/des code. It is just
that authentication through openssl is available and many 5.x / 4.x have it
by default...

It is required by sshd and friends but crypto is still optional.
-- 
Ollivier ROBERT  -=-  Eurocontrol EEC/ITM  -=-  [EMAIL PROTECTED]
FreeBSD caerdonn.eurocontrol.fr 5.0-CURRENT #46: Wed Jan  3 15:52:00 CET 2001

To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message



Re: ntpd 4.1

2001-08-03 Thread Maxim Sobolev

Ollivier Robert wrote:

> Now that ntpd 4.1.0 has been released (finally!), I'll upgrade current very
> soon.
>
> The question I have is the following: authentication was done with md5 code
> builtin and I disabled DES support (not supported anymore). Now, with 4.1,
> it can be linked to openssl but it is still an optional component.
>
> I'm a bit reluctant to force openssl for just ntpd.
>
> Any ideas / comments ?

Why not to use libmd5?

-Maxim



To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message



Re: ntpd 4.1

2001-08-03 Thread Sheldon Hearn



On Thu, 02 Aug 2001 14:07:38 +0100, Mark Murray wrote:

> > Now that ntpd 4.1.0 has been released (finally!), I'll upgrade current very
> > soon.
> 
> :-) :-) :-)

Unless David Mills can be convinced to manage his documentation in a
sensible fashion, this will be the last upgrade for which I'll be doing
HTML -> mdoc transcription.

Ciao,
Sheldon.

To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message