[Info-vax] OpenVMS TCP/IP Services NTP using symmetric key authentication

Craig A. Berry craig.a.berry at gmail.com
Wed Mar 25 17:05:45 EDT 2015


On Wednesday, March 25, 2015 at 2:48:04 PM UTC-5, RobertsonEricW wrote:
> Has anyone in this group successfully configured the NTP service 
> for HP OpenVMS TCP/IP services to use the authenticated NTP service
> offered through NIST? 

I haven't tried it but the first thing that looks different to me about your configuration and the one documented at

http://www.ntp.org/ntpfaq/NTP-s-config-adv.htm#AEN3143

is that you don't have an authdelay specification.  A poorly handled timeout could explain the symptom, but so could a lot of other things.

If this key business involves SSL, have you tried to factor out version problems, such as something in NTP that should've been updated in the transition from HP SSL 1.3 to HP SSL 1.4 but wasn't?  If that is the problem, you might be able to work around it by making NTP see an older version of SSL via logicals, such as the ones you find with:

$ search/format=nonulls sys$system:tcpip$ntpdate.exe ssl$
December%a %b %e %H:%M:%S %Y%m/%d/%y%H:%M:%SWednesdayThursdaySaturdayFebruarySeptemberNovemberDecemberISO8859-1%I:%M:%S %pSYS$SHARE:
SSL$LIBCRYPTO_SHR32.EXETCPIP-E-DLSYMERR, error finding symbol %s, errno: %s<LF>SSL$LIBCRYPTO_SHR32OPENSSL_ADD_ALL_ALGO_NOCONFOPENSSL
_ADD_ALL_CIPHERSERR_PRINT_ERRORS_FPERR_GET_ERRORASN1_INTEGER_FREEASN1_INTEGER_GETASN1_INTEGER_NEW

Also, have you tried specifying everything on the command line on the off chance that ntpdate doesn't even use ntp.conf?



More information about the Info-vax mailing list