[Buildroot] [PATCH 1/1] package/{chrony, ntp, openntpd}: turn off DNSSEC validation

Peter Korsgaard peter at korsgaard.com
Tue Aug 3 09:19:43 UTC 2021


>>>>> "James" == James Hilliard <james.hilliard1 at gmail.com> writes:

 > We have a chicken and egg problem: validation of DNSSEC signatures
 > doesn't work without a correct clock, but to set the correct clock we
 > need to contact NTP servers which requires resolving a hostname, which
 > would normally require DNSSEC validation.

 > Let's break the cycle by excluding NTP hostname resolution from
 > validation for now.

 > Details:
 > https://github.com/systemd/systemd/commit/abf4e5c1d3ad767bc0ed67883e8e4d916af095ec

 > Signed-off-by: James Hilliard <james.hilliard1 at gmail.com>

Committed to 2021.02.x and 2021.05.x, thanks.

-- 
Bye, Peter Korsgaard


More information about the buildroot mailing list