Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.user > #181933
| From | Henrique de Moraes Holschuh <hmh@debian.org> |
|---|---|
| Newsgroups | linux.debian.user |
| Subject | Re: https_port |
| Date | 2017-06-08 17:00 +0200 |
| Message-ID | <tQ74J-5AT-5@gated-at.bofh.it> (permalink) |
| References | (2 earlier) <tPKBf-7Z0-79@gated-at.bofh.it> <tPSfs-4Fa-121@gated-at.bofh.it> <tQ4JA-4eB-17@gated-at.bofh.it> <tQ52V-4l3-1@gated-at.bofh.it> <tQ5FE-4OD-13@gated-at.bofh.it> |
| Organization | linux.* mail to news gateway |
On Thu, 08 Jun 2017, Darac Marjal wrote: > On Thu, Jun 08, 2017 at 08:41:14AM -0700, Adiel Plasencia Herrera wrote: > >How to generate the certificate and the key to make a very > >basic configuration of the https connection. > > NTP doesn't use HTTPS. It uses its own port, it's own protocol and > implements standard cryptography in a manner more suited to the > protocol. > > See https://www.eecis.udel.edu/~mills/ntp/html/autokey.html for more > details. Don't bother with autokey, it is not worth the pain. If you can use ntp symmetric key authentication, that one should take care of your servers well enough. There is no security for anything that is based on SNTP, though (that "S" is for Simple, not Secure), you'd have to do it in a lower layer (local firewall, IPSEC AH, whatever). -- Henrique Holschuh
Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
NTP.conf pool vs server ray <ray@aarden.us> - 2017-06-07 15:20 +0200
Re: NTP.conf pool vs server Greg Wooledge <wooledg@eeg.ccf.org> - 2017-06-07 15:30 +0200
Re: NTP.conf pool vs server Gene Heskett <gheskett@shentel.net> - 2017-06-07 16:50 +0200
Re: NTP.conf pool vs server Gene Heskett <gheskett@shentel.net> - 2017-06-07 16:40 +0200
Re: NTP.conf pool vs server Greg Wooledge <wooledg@eeg.ccf.org> - 2017-06-07 17:00 +0200
Re: NTP.conf pool vs server Darac Marjal <mailinglist@darac.org.uk> - 2017-06-07 17:00 +0200
Re: NTP.conf pool vs server Greg Wooledge <wooledg@eeg.ccf.org> - 2017-06-07 17:10 +0200
Re: NTP.conf pool vs server Joshua Schaeffer <jschaeffer0922@gmail.com> - 2017-06-07 17:30 +0200
Re: NTP.conf pool vs server Greg Wooledge <wooledg@eeg.ccf.org> - 2017-06-07 17:50 +0200
Re: NTP.conf pool vs server Henrique de Moraes Holschuh <hmh@debian.org> - 2017-06-07 18:10 +0200
Re: NTP.conf pool vs server Darac Marjal <mailinglist@darac.org.uk> - 2017-06-07 17:20 +0200
Re: NTP.conf pool vs server Gene Heskett <gheskett@shentel.net> - 2017-06-08 01:10 +0200
Re: NTP.conf pool vs server Darac Marjal <mailinglist@darac.org.uk> - 2017-06-08 14:30 +0200
Re: https_port "Adiel Plasencia Herrera" <adielp@estereocentro.icrt.cu> - 2017-06-08 14:50 +0200
Re: https_port Darac Marjal <mailinglist@darac.org.uk> - 2017-06-08 15:30 +0200
Re: https_port Henrique de Moraes Holschuh <hmh@debian.org> - 2017-06-08 17:00 +0200
Re: https_port "Adiel Plasencia Herrera" <adielp@estereocentro.icrt.cu> - 2017-06-08 17:20 +0200
Re: https_port Darac Marjal <mailinglist@darac.org.uk> - 2017-06-08 17:30 +0200
Re: https_port Greg Wooledge <wooledg@eeg.ccf.org> - 2017-06-08 17:40 +0200
Re: https_port Darac Marjal <mailinglist@darac.org.uk> - 2017-06-08 17:50 +0200
Re: https_port "Adiel Plasencia Herrera" <adielp@estereocentro.icrt.cu> - 2017-06-08 18:00 +0200
Re: https_port Jim Ohlstein <jim@mailman-hosting.com> - 2017-06-08 19:10 +0200
Re: https_port Charlie Kravetz <cjk@teamcharliesangels.com> - 2017-06-09 16:40 +0200
Reply-to-all or reply-to-list again (was: https_port) Nicolas George <george@nsup.org> - 2017-06-09 16:50 +0200
Re: Reply-to-all or reply-to-list again (was: https_port) Fungi4All <fungilife@protonmail.com> - 2017-06-09 17:20 +0200
Re: Reply-to-all or reply-to-list again The Wanderer <wanderer@fastmail.fm> - 2017-06-09 17:20 +0200
Re: Reply-to-all or reply-to-list again Nicolas George <george@nsup.org> - 2017-06-09 18:00 +0200
Re: Reply-to-all or reply-to-list again The Wanderer <wanderer@fastmail.fm> - 2017-06-09 21:20 +0200
Re: Reply-to-all or reply-to-list again Joel Rees <joel.rees@gmail.com> - 2017-06-10 04:20 +0200
Re: Reply-to-all or reply-to-list again Fungi4All <fungilife@protonmail.com> - 2017-06-10 16:00 +0200
Re: Reply-to-all or reply-to-list again Joel Rees <joel.rees@gmail.com> - 2017-06-10 16:30 +0200
Re: Reply-to-all or reply-to-list again Fungi4All <fungilife@protonmail.com> - 2017-06-10 18:00 +0200
Re: Reply-to-all or reply-to-list again (was: https_port) Gene Heskett <gheskett@shentel.net> - 2017-06-09 17:30 +0200
Re: NTP.conf pool vs server Gene Heskett <gheskett@shentel.net> - 2017-06-08 16:10 +0200
Re: NTP.conf pool vs server John Hasler <jhasler@newsguy.com> - 2017-06-07 18:10 +0200
Re: NTP.conf pool vs server Brian <ad44@cityscape.co.uk> - 2017-06-07 18:30 +0200
Re: NTP.conf pool vs server David Wright <deblis@lionunicorn.co.uk> - 2017-06-11 18:00 +0200
Re: NTP.conf pool vs server Brian <ad44@cityscape.co.uk> - 2017-06-11 19:30 +0200
Re: NTP.conf pool vs server Teemu Likonen <tlikonen@iki.fi> - 2017-06-08 08:40 +0200
Re: NTP.conf pool vs server Curt <curty@free.fr> - 2017-06-08 09:20 +0200
Re: NTP.conf pool vs server Gene Heskett <gheskett@shentel.net> - 2017-06-08 15:40 +0200
Re: NTP.conf pool vs server Jim Ohlstein <jim@mailman-hosting.com> - 2017-06-07 18:40 +0200
Re: NTP.conf pool vs server Kushal Kumaran <kushal@locationd.net> - 2017-06-07 17:00 +0200
csiph-web