Re: [Ntp] Finding leap-seconds.list

["Dieter Sibold" <[e-mail]>]

On 8 Nov 2018, at 15:51, Martin Burnicki wrote:

> Warner Losh wrote:
>> So what's the new place to get it if the IEFT stops hosting it? All the
>> 'much better places' don't earlier in the thread do not resolve for me
>> at all (or resolved to web pages that aren't suitable for automatic
>> downloading). The ntp leapsecond file has a format that's been fixed for
>> at least two decades. So what's the real 'next step' for people that
>> download it outside of the TZ stuff?
>>
>> This is a very disruptive change to the FreeBSD community, at least.
>> It's not clear what it accomplishes.
>
> Why not use the leap second file directly from the IERS?

I very much support this.

>
> The IERS is the authoritative source that decides if a leap second will
> be inserted, or not, and it publishes this information twice a year in
> its Bulletin C.
>
> Some years ago I contacted the IERS folks and asked them if they
> couldn't also provide a leap second file in NTP/NIST format, and they
> started to do this. Yet the updated file was always available
> immediately when a Bulletin C was published.
> https://hpiers.obspm.fr/iers/bul/bulc/ntp/ (directory listing)
> https://hpiers.obspm.fr/iers/bul/bulc/ntp/leap-seconds.list (file)

This link is also provided in draft-ietf-ntp-bcp

>
> Right from the beginning the IERS leap second file was even available
> via https, while e.g. from NIST it used to be available via ftp only (I
> don't know if currently it's also available via https).
>
> Actually there are discussions on security stuff like NTS to prevent
> systems from accepting spoofed time, and IMO it's a no-go to provide
> time servers with a leap second file that is retrieved via FTP.
>
> And yes, I agree that the SHA1 signature in the leap second file can
> *only* be used to check the integrity of the file. That signature can
> not be used to check if the file has provided by an authentic source
> like IERS, NIST, or USNO.
>
>
> Martin
> -- 
> Martin Burnicki
>
> Senior Software Engineer
>
> MEINBERG Funkuhren GmbH & Co. KG
> Email: [e-mail]
> Phone: [phone]
> Linkedin: https://www.linkedin.com/in/martinburnicki/
>
> Lange Wand 9, 31812 Bad Pyrmont, Germany
> Amtsgericht Hannover 17HRA 100322
> Geschäftsführer/Managing Directors: Günter Meinberg, Werner Meinberg,
> Andre Hartmann, Heiko Gerstung
> Websites: https://www.meinberg.de  https://www.meinbergglobal.com
> Training: https://www.meinberg.academy