Re: ???SSL cert

2016-06-10 Thread Amar Takhar
On 2016-06-10 19:30 -0700, Gary E. Miller wrote: > > Qualys still gives it an F. > > https://www.ssllabs.com/ssltest/analyze.html?d=ntpsec.org&latest For a seperate issue. The one you reported has been fixed. I'll take care of this tomorrow. Amar.

Re: ???SSL cert

2016-06-10 Thread Gary E. Miller
Yo Amar! On Sat, 11 Jun 2016 02:23:41 + Amar Takhar wrote: > I went ahead and fixed this for www.ntpsec.org I will fix it for all > other services tomorrow. A certificate got left in the chain I was > using I have removed it. Qualys still gives it an F. https://www.ssllabs.com/ssltest/an

Re: ???SSL cert

2016-06-10 Thread Amar Takhar
I went ahead and fixed this for www.ntpsec.org I will fix it for all other services tomorrow. A certificate got left in the chain I was using I have removed it. Amar. ___ devel mailing list devel@ntpsec.org http://lists.ntpsec.org/mailman/listinfo/de

Re: ???SSL cert

2016-06-10 Thread Amar Takhar
On 2016-06-10 19:12 -0700, Gary E. Miller wrote: > Yo Amar! > > "One of the root or intermediate certificates has expired (115 days ago)" I see what's going on, I will fix this tomorrow, it the cert in Apache. Thanks for pointing it out, this would not have been fixed going with a different reg

Re: ???SSL cert

2016-06-10 Thread Gary E. Miller
Yo Amar! On Sat, 11 Jun 2016 02:02:37 + Amar Takhar wrote: > On 2016-06-10 18:16 -0700, Gary E. Miller wrote: > > Yo Webmaster! > > > > Soemthing marginal about the ntpsec.org SSL cert, as seen by > > Wheezy: > > I have no idea what's going on. Our certificate is signed by > GlobalSign.

Re: ???SSL cert

2016-06-10 Thread Amar Takhar
On 2016-06-10 18:16 -0700, Gary E. Miller wrote: > Yo Webmaster! > > Soemthing marginal about the ntpsec.org SSL cert, as seen by Wheezy: I have no idea what's going on. Our certificate is signed by GlobalSign. I checked from multiple hosts it works fine. Amar. __

✘SSL cert

2016-06-10 Thread Gary E. Miller
Yo Webmaster! Soemthing marginal about the ntpsec.org SSL cert, as seen by Wheezy: root@pi2:/usr/local/src/NTP/chrony-graph/run1# wget https://www.ntpsec.org/clocktower128.png --2016-06-10 18:08:12-- https://www.ntpsec.org/clocktower128.png Resolving www.ntpsec.org (www.ntpsec.org)... 140.211.9

✘burst/iburst

2016-06-10 Thread Gary E. Miller
Yo All! Gack. Something about how burst works was bugging me. So I put tcpdump on it. I don't see any difference between burst and not having burst... I'm not saying it does not do anything, just not anything immediately obvious. iburst does have an affect. I see six, (not eight) time request

Re: [gpsd-dev] refclock 28 gone wacky on me

2016-06-10 Thread Gary E. Miller
Yo Eric! On Fri, 10 Jun 2016 03:49:22 -0400 "Eric S. Raymond" wrote: > That's... very weird. I've never seen it happen. But it would explain some old complaints. Now that we know which Skytraq option it is, I recall always selecting the workaround. > It sounds as though for some crazy reason

Re: Shippable ntp.conf files for the HOWTO

2016-06-10 Thread Gary E. Miller
Yo Hal! On Fri, 10 Jun 2016 00:55:09 -0700 Hal Murray wrote: > g...@rellim.com said: > >> The pool command hasn't been in the middle of this sort of sharp > >> eyed=20 scrutiny. I won't be surprised if there are bugs or > >> quirks. > > Well, if we can't prove it is better I would not be in a

Design proposal for a better ACL language

2016-06-10 Thread Daniel Franke
Remove the following existing configuration commands: * discard * restrict * controlkey * requestkey * trustedkey And replace them with a directive named 'rule', with the following EBNF syntax: rule = 'rule', {predicate}, disposition, [key] predicate = ['not'], atom atom = 'source', CIDR-BLOCK

Re: refclock 28 gone wacky on me

2016-06-10 Thread Gary E. Miller
Yo Mike! On Fri, 10 Jun 2016 14:25:05 -0400 Mike wrote: > Right now I finally got it hooked to a Windows machine, used the POS > software that is reportedly for this specific module. I found a > setting that sets the NMEA messages to be sent at the top of the > second. This gets me back close

Re: refclock 28 gone wacky on me

2016-06-10 Thread Mike
On 06/09/2016 11:38 PM, Gary E. Miller wrote: Yo Mike! On Thu, 9 Jun 2016 22:25:54 -0400 Mike wrote: What I fail to understand is why this just seems to have appeared out of thin air. It's not like I just hooked this up yesterday. I have toyed with this thing for probably three years off an

Re: refclock 28 gone wacky on me

2016-06-10 Thread Eric S. Raymond
Frank Nicholas : > It’s been a while (years), and at the time it was pure NTP (no gpsd > involved). Whatever the sentences were that were pushing it over didn’t > happen very close together. I seem to remember that one was reporting if it > was using the external vs. internal antenna and that

Re: Wonky NTP startup and the incremental-configuration problem

2016-06-10 Thread Achim Gratz
Eric S. Raymond writes: > ntpq has dangerous operations that tweak parameters of the time-sync > algorithms on the fly - operations that can be triggered remotely. Or so I > gather from things Hal Murray has said; my outside view is weak here, > I've never explored those operations. In the standar

Re: Wonky NTP startup and the incremental-configuration problem

2016-06-10 Thread Eric S. Raymond
Jay Maynard : > I do have an Alpha with Tru64, and would be happy to lend it to the > project. It'll be a few days before I can attempt to bring it up. It hasn't > run in something like 10 years. Thanks. Hal Murray suggested we use an Alpha for comparative profiling. He'll be on vacation for a we

Re: Wonky NTP startup and the incremental-configuration problem

2016-06-10 Thread Daniel Poirot
When faced with the exciting task of porting RTI's DDS real-time, Ethernet publish/subscribe middleware to OpenVMS for the USAF JSTARS project, I turned to both eBay (ES40) and FreeAXP. Performance on the Alpha emulator was faster than the real hardware and certainly suitable for development and un

Re: refclock 28 gone wacky on me

2016-06-10 Thread Frank Nicholas
> On Jun 9, 2016, at 9:58 PM, Eric S. Raymond wrote: > > Frank Nicholas : >> I can tell you from experience, that with the Adafruit hat, and the default >> sentences, 9600 baud is not fast enough. Some periodic sentences (period > >> few seconds) will push a cycle past one (1) second. Even w

Re: Wonky NTP startup and the incremental-configuration problem

2016-06-10 Thread Eric S. Raymond
Hal Murray : > > e...@thyrsus.com said: > >> ntpq can be used to tweak things, but it takes a password. > >> I've never used it that way. > > And if *you* haven't...I begin to wonder if 99% of the userbase even knows > > this feature exists. > > > I'm sorely tempted to just rip everything passwor

Re: Wonky NTP startup and the incremental-configuration problem

2016-06-10 Thread Hal Murray
e...@thyrsus.com said: >> ntpq can be used to tweak things, but it takes a password. >> I've never used it that way. > And if *you* haven't...I begin to wonder if 99% of the userbase even knows > this feature exists. > I'm sorely tempted to just rip everything password-protected out of ntpq and >

Re: Wonky NTP startup and the incremental-configuration problem

2016-06-10 Thread Eric S. Raymond
(Jay: You can skip down to where it says "DEC Alpha".) Hal Murray : > > e...@thyrsus.com said: > > ntpq has dangerous operations that tweak parameters of the time-sync > > algorithms on the fly - operations that can be triggered remotely. Or so I > > gather from things Hal Murray has said; my out

Re: refclock 28 gone wacky on me

2016-06-10 Thread Hal Murray
e...@thyrsus.com said: >> Mail crossing in the night. The burst is starting one sentence before the >> PPS not starting in the middle and overflowing into the following second. > That's... very weird. I've never seen it happen. > It sounds as though for some crazy reason the GPS is delivering t

Re: Shippable ntp.conf files for the HOWTO

2016-06-10 Thread Hal Murray
g...@rellim.com said: >> The pool command hasn't been in the middle of this sort of sharp eyed=20 >> scrutiny. I won't be surprised if there are bugs or quirks. > Well, if we can't prove it is better I would not be in a hurry to use it. Please give it a try. We can't possibly prove anything if

Re: refclock 28 gone wacky on me

2016-06-10 Thread Eric S. Raymond
Hal Murray : > > e...@thyrsus.com said: > > What you should see is the PPS bar, followed by a sentence burst, followed > > by a pause. If the burst is wrapping into the next second, it will be > > instantly obvious because the burst won't finish (no pause) before the next > > PPS bar. > > Mail

Re: refclock 28 gone wacky on me

2016-06-10 Thread Hal Murray
e...@thyrsus.com said: > What you should see is the PPS bar, followed by a sentence burst, followed > by a pause. If the burst is wrapping into the next second, it will be > instantly obvious because the burst won't finish (no pause) before the next > PPS bar. Mail crossing in the night. The b

Re: refclock 28 gone wacky on me

2016-06-10 Thread Eric S. Raymond
Hal Murray : > > e...@thyrsus.com said: > > That's odd. The normal semtence budget including GPGSV should fit inside a > > second. Are you getting some kind of $PMTK thing that pushes it over? > > I'm using gpsmon to watch the output. There is a pause every second. That's > measuring by eye

Re: Wonky NTP startup and the incremental-configuration problem

2016-06-10 Thread Hal Murray
e...@thyrsus.com said: > ntpq has dangerous operations that tweak parameters of the time-sync > algorithms on the fly - operations that can be triggered remotely. Or so I > gather from things Hal Murray has said; my outside view is weak here, I've > never explored those operations. ntpq can be u