The ntpd daemon implements the Simple Network Time Protocol version 4 as
described in RFC 2030 and the Network Time Protocol version 3 as de-
scribed in RFC 1305. It can synchronize the local clock to one or more
remote NTP servers and act as NTP server itself, redistributing the local
time.
net/openntpd: conditionalize ca_root_nss dependency on FreeBSD version
__FreeBSD_version >= 1500063 already includes a certificate bundle
PR: 289323
Reported by: Herbert J. Skuhra <herbert@gojira.at>
net/openntpd: fix for NICs with hardware timestamp support
OpenNTPD enables the reception of a timestamp with datagrams.
Network adapters that support hardware timestamping of packets,
e.g. mlx5en(4), create a SCM_TIME_INFO control message in addition
to the SCM_TIMESTAMP one. Provide a sufficiently large buffer to
accommodate this and avoid a MSG_CTRUNC error.
PR: 271224
Obtained from: Dmitry Wagin <dmitry.wagin@ya.ru>
net/openntpd: remove no-op configure argument
Drop the --with-cacert configure option, which does nothing at all.
OpenNTPD always loads the root CA file from the path returned by
tls_default_ca_cert_file(), i.e., /etc/ssl/cert.pem.
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
net/openntpd: switch to libretls on FreeBSD 12+
When using LibreSSL use its own libtls but when using OpenSSL use
libtls from libretls.
Reworked from
PR: 252802
Submitted by: jbeich
Update to 6.8p1. This is a large catch-up release.
Configuration changes:
* Servers can be marked as "trusted" to skip constraints processing.
* The -s and -S options are no-ops and will be removed in the future.
http://www.openntpd.org/txt/release-6.8p1.txt
Merge back fixes from OpenBSD 6.8-beta:
If no replies are received for a while due to connectivity issues,
go into unsynced mode.
PR: 221282
Reported by: Rene Wagner <rw@nelianur.org>
Obtained from: OpenBSD
Only pass -E to find(1) when passing -regex or -iregex
The -E flag tells find(1) to interpret regular expressions which were
passed as arguments to -regex and -iregex as extended regular expressions.
It has no effect on other otherwise. Let's not invoke find(1) with -E if
not necessary.
Approved by: portmgr (blanket approval)
net/ntpsec: Add CONFLICTS between net/{ntp,ntp-devel,openntpd,ntpsec} because
they all install sbin/ntpd
Also remove -* for versions because this isn't needed.
PR: 246553
Reported by: naddy
Approved by: portmgr (port compliance, infrastructure)
Move the numerical ID for the "_ntp" user, required for net/openntpd's
privilege separation, after its value was usurped by the new "ntpd"
user in 12.0-CURRENT.
PR: 229936
Do not use post-stage. Use post-install instead.
The only reason to use post-stage is because the port needs to do
"things" at a later time, like some plist manipulation.
While there, fold post-install in do-install targets when they are
defined.
PR: 214780
Submitted by: mat
Exp-run by: antoine
Sponsored by: Absolight
Unblock the package build via static libressl. Adapted from [1].
OpenNTPD requires libtls, which is only available from LibreSSL.
If LibreSSL is not the default SSL library, link with a static copy
of the LibreSSL libraries. This approach has the drawback that
whenever there is an update to libressl, the openntpd port will
require a PORTREVISION bump, otherwise it will not pick up the fixed
library and continue to use the old code.
Drop the RESSL option as LibreSSL is now always available.
PR: 213691 [1]
Submitted by: jbeich
Most commonly used build systems support silent builds, when they
hide actual commands executed and only show short summary line (like
"CC foo.c"). CMake and ninja enable this by default, some autotools
using ports do as well. This is unacceptable because we need complete
build logs at any time, so we now switch to verbose build logs
unconditionally. Note that this change deliberately affects ALL
builds and not only package builds on cluster, because we need to
be sure that user experiencing failure can always provide informative
build log regardless of settings and without rerunning the build.
Change summary:
- Always do verbose builds for cmake, ninja and GNU configure (the
latter includes check if --disable-silent-rules is actually supported
by the configure script; there are isolated cases when it's not true)
(Only the first 15 lines of the commit message are shown above )
Add support for changing the location of ntpd.conf (openntpd_config),
and add a 'configtest' rc(8) target. Also note openntpd_flags in the
comments at the top of the rc(8) script.
PORTREVISION bump for rc(8) script change.
PR: 210153
Approved by: naddy (maintainer)
Update to 6.0p1. Notable fixes:
* Set MOD_MAXERROR to avoid unsynced time status when using ntp_adjtime.
* Hardened TLS for ntpd constraints, enabling server name verification.
PR: 210056
For the RESSL option, switch the dependency from libressl-devel to
security/libressl, now that the latter is new enough.
PR: 209343
Submitted by: tom.beard@public-internet.co.uk
Update to 5.9p1. Notable changes:
* The rtable option was removed from server and servers. Users of
"server * rtable X" will need to switch to launching ntpd with
# setfib -F X /usr/sbin/ntpd
* Various improvements to the HTTPS constraint feature (requires
LibreSSL).
This port reenables rtable support in the listen option on FreeBSD.
Relnotes: http://www.openntpd.org/txt/release-5.9p1.txt
* Reenable certificate validation through libressl
(libressl 2.2.6 seems to be happy enough with the ca_root_nss 3.22.2
upgrade)
* Avoid strptime %Z which is nonstandard and can give surprising
results on different operating systems. (Same fix as upstream.)
PR: 207685
Submitted by: mandree
MASTER_SITES cleanup.
- Replace ${MASTER_SITE_FOO} with FOO.
- Merge MASTER_SITE_SUBDIR into MASTER_SITES when possible. (This means 99.9%
of the time.)
- Remove occurrences of MASTER_SITE_LOCAL when no subdirectory was present and
no hint of what it should be was present.
- Fix some logic.
- And generally, make things more simple and easy to understand.
While there, add magic values to the FESTIVAL, GENTOO, GIMP, GNUPG, QT and
SAMBA macros.
Also, replace some EXTRACT_SUFX occurences with USES=tar:*.
Checked by: make fetch-urlall-list
With hat: portmgr
Sponsored by: Absolight
Use plain "pgrep" in rc script to accommodate different path in DragonFly.
Reported by: Juan Francisco Cantero Hurtado <iam@juanfra.info>
Update to 5.7p4. No user-visible changes.
In particular, the new HTTPS contraint feature is *not* enabled, because
* LibreSSL fails with the certificiate bundle from ca_root_nss
* USE_OPENSSL does not handle LibreSSL yet
After a long hiatus, update to 5.7p1.
Major user-visible changes:
* Added ntpctl(8), which allows for querying ntpd(8) at runtime.
* Added support for different routing tables.
In the rc.d scripts, change assignments to rcvar to use the
literal name_enable wherever possible, and ${name}_enable
when it's not, to prepare for the demise of set_rcvar().
In cases where I had to hand-edit unusual instances also
modify formatting slightly to be more uniform (and in
some cases, correct). This includes adding some $FreeBSD$
tags, and most importantly moving rcvar= to right after
name= so it's clear that one is derived from the other.
Remove the FreeBSD KEYWORD from all rc.d scripts where it appears.
We have not checked for this KEYWORD for a long time now, so this
is a complete noop, and thus no PORTREVISION bump. Removing it at
this point is mostly for pedantic reasons, and partly to avoid
perpetuating this anachronism by copy and paste to future scripts.
Add a paragraph to ntpd.8 about enabling ntpd in /etc/rc.conf.
Adapted from the equivalent text in the OpenBSD man page which has been
removed from the portable version.
Requested by: Don Sullivan <sullivan@gaia.arc.nasa.gov>
Update to 3.6.1p1. Many enhancements, among these:
* -s option to set the time immediately at startup if the local
clock is off by more than 180 seconds.
* Adjustments smaller than 128ms are no longer logged.
(1)
Update to 20040718p. Changes in this release:
- Ignore obviously malformed queries.
- Respond to client queries with better server statistics.
(2)
Fix configuration file location in man pages.
PR: 69233
Submitted by: edwin (2)
Initial import of openntpd (OpenBSD's ntpd, portable version).
The ntpd daemon implements the Simple Network Time Protocol version 4 as
described in RFC 2030 and the Network Time Protocol version 3 as de-
scribed in RFC 1305. It can synchronize the local clock to one or more
remote NTP servers and act as NTP server itself, redistributing the local
time.
