In the configuration (NTP), I want to use Autokey encryption, but can not catch whatever found in wireshark Autokey bags, and other packages ASSOC, CERT, COOK, signs and can catch the TAI, key hold positions in the/etc/NTP, key generation: the NTP - the keygen - T - G - 2048 m, has been exchange GQ parameters, open port 123,
Below my server configuration:
Driftfile/var/lib/NTP/drift
Restrict 127.0.0.1
Restrict: : 1
Fudge 127.127.1.0 stratum 5
Includefile/etc/NTP/crypto/pw
Keys/etc/NTP/keys
Crypto
Keysdir/etc/NTP
Logfile/var/log/NTP. Log
Statsdir/var/log/ntpstats/
The statistics loopstats peerstats clockstats cryptostats
Filegen loopstats file loopstats type day enable
Filegen peerstats file peerstats type day enable
Filegen clockstats file clockstats type day enable
Filegen cryptostats file cryptostats type day enable
Disable the monitor
The following the end of the service configuration file:
Crypto
Keysdir/etc/NTP
Statsdir/var/log/ntpstats/
The statistics loopstats peerstats clockstats cryptostats
Filegen loopstats file loopstats type day enable
Filegen peerstats file peerstats type day enable
Filegen clockstats file clockstats type day enable
Filegen cryptostats file cryptostats type day enable

Driftfile/var/lib/NTP/drift
Restrict 127.0.0.1
Restrict: : 1
Server 192.168.235.128 autokey
Includefile/etc/NTP/crypto/pw
Keys/etc/NTP/keys
The file/var/log/NTP. Log

Disable the monitor

CodePudding user response:

Could you configure NTP source code without configuration to start the encryption