From mboxrd@z Thu Jan  1 00:00:00 1970
Return-path: <ptxdist-bounces@pengutronix.de>
In-Reply-To: <20200731161141.6155-2-bruno.thomsen@gmail.com>
MIME-Version: 1.0
Message-Id: <E1k2TzG-0002zB-AH@dude02.hi.pengutronix.de>
From: Michael Olbrich <mol@pengutronix.de>
Date: Mon, 03 Aug 2020 08:30:18 +0200
Subject: Re: [ptxdist] [APPLIED] chrony: nettle authentication support
List-Id: PTXdist Development Mailing List <ptxdist.pengutronix.de>
List-Unsubscribe: <http://metis.pengutronix.de/cgi-bin/mailman/options/ptxdist>, 
 <mailto:ptxdist-request@pengutronix.de?subject=unsubscribe>
List-Archive: <http://metis.pengutronix.de/cgi-bin/mailman/private/ptxdist/>
List-Post: <mailto:ptxdist@pengutronix.de>
List-Help: <mailto:ptxdist-request@pengutronix.de?subject=help>
List-Subscribe: <http://metis.pengutronix.de/cgi-bin/mailman/listinfo/ptxdist>, 
 <mailto:ptxdist-request@pengutronix.de?subject=subscribe>
Reply-To: ptxdist@pengutronix.de
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: ptxdist-bounces@pengutronix.de
Sender: "ptxdist" <ptxdist-bounces@pengutronix.de>
To: ptxdist@pengutronix.de
Cc: Bruno Thomsen <bruno.thomsen@gmail.com>

Thanks, applied as 0f6af4e9c20116629fa321e836cfa376619c433b.

Michael

[sent from post-receive hook]

On Mon, 03 Aug 2020 08:30:18 +0200, Bruno Thomsen <bruno.thomsen@gmail.com> wrote:
> Use nettle crypto lib for stronger time packet
> authentication support.
> 
> Signed-off-by: Bruno Thomsen <bruno.thomsen@gmail.com>
> Message-Id: <20200731161141.6155-2-bruno.thomsen@gmail.com>
> Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
> 
> diff --git a/rules/chrony.in b/rules/chrony.in
> index 1f5e241c9433..e150448a84e9 100644
> --- a/rules/chrony.in
> +++ b/rules/chrony.in
> @@ -6,6 +6,7 @@ menuconfig CHRONY
>  	prompt "chrony                        "
>  	select LIBC_M
>  	select LIBCAP
> +	select NETTLE		if CHRONY_USE_NETTLE
>  	help
>  	  This will install the Chrony NTPD Daemon (chronyd)
>  	  Chrony is a pair of programs which are used to maintain
> @@ -21,6 +22,13 @@ menuconfig CHRONY
>  
>  if CHRONY
>  
> +config CHRONY_USE_NETTLE
> +	bool
> +	prompt "Use nettle crypto library"
> +	help
> +	  Use nettle crypto library for stronger keys than MD5 in
> +	  NTP authentication.
> +
>  comment "install options   ---"
>  
>  config CHRONY_INSTALL_CHRONY_COMMAND
> diff --git a/rules/chrony.make b/rules/chrony.make
> index 8c1034462a0f..9f20c413dff4 100644
> --- a/rules/chrony.make
> +++ b/rules/chrony.make
> @@ -44,8 +44,8 @@ CHRONY_CONF_OPT		:= \
>  	--sysconfdir=/etc \
>  	--disable-readline \
>  	--without-editline \
> -	--disable-sechash \
> -	--without-nettle \
> +	$(call ptx/ifdef, PTXCONF_CHRONY_USE_NETTLE,,--disable-sechash) \
> +	$(call ptx/ifdef, PTXCONF_CHRONY_USE_NETTLE,,--without-nettle) \
>  	--without-nss \
>  	--without-tomcrypt \
>  	--disable-cmdmon \

_______________________________________________
ptxdist mailing list
ptxdist@pengutronix.de
To unsubscribe, send a mail with subject "unsubscribe" to ptxdist-request@pengutronix.de