-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 13 Aug 2020 02:11:44 -0500 Source: ntpsec Architecture: source Version: 1.1.9+dfsg1-1 Distribution: unstable Urgency: medium Maintainer: Richard Laager <rlaager@debian.org> Changed-By: Richard Laager <rlaager@sid.coderich.net> Closes: 957616 Changes: ntpsec (1.1.9+dfsg1-1) unstable; urgency=medium . * New upstream version - Add AES and other algorithm support to ntpq and ntpdig, from OpenSSL. - The default restrictions now start with noquery and limited to reduce the opportunities for being used for DDoS-ing. - NTS (per the draft RFC) now requires TLS 1.3. - The config keyword tlsciphers has been removed. - Additional filtering and sort options have been added to ntpq/mrulist. - With "restrict limited", traffic is now limited to an average of 1 packet per second with bursts of 20. - SIGHUP and hourly checks have been unified. Both now: - check for a new log file - check for a new certificate file - check for a new leap file SIGHUP also restarts all pending DNS and NTS probes. - Defer loading certificate until after drop-root. This checks that file permissions are setup correctly so ntpd will be able to reload the certificate. - Fix ntpleapfetch to work with latest leap file. - This fixes building with GCC 10. (Closes: 957616) * Drop ntpsec-ntpviz Suggests python * Fix the certbot hook quoting * Switch to rlaager@debian.org * Switch to asciidoctor * Raise OpenSSL dependency * Start transition to port 4460 - ntpd in server mode now listens on both ports 123 and 4460. - ntpd in client mode now defaults to port 4460. * Upgrade to debhelper-compat 13 Checksums-Sha1: 4a80e00a26e6c480ec67ed59cac8f8da317350b3 2388 ntpsec_1.1.9+dfsg1-1.dsc c287749207b4c686cb7bb388e5cdb120f7ffde30 2233212 ntpsec_1.1.9+dfsg1.orig.tar.xz d11405c3eb334c119096086198246c7e02678794 52636 ntpsec_1.1.9+dfsg1-1.debian.tar.xz a2b8250cd8dff350658d671a1b90f967ba6a23e6 8238 ntpsec_1.1.9+dfsg1-1_source.buildinfo Checksums-Sha256: be5a293e9accc587264659cbdfdf95c342d9b384fa1564dd6a36076ec8d81053 2388 ntpsec_1.1.9+dfsg1-1.dsc 123630754fe49b437222185677d472887770d17642992b44375c74ece95ff2ee 2233212 ntpsec_1.1.9+dfsg1.orig.tar.xz f020ef8c87ab7f5e7be70890d79341d17214ed3404939e62a2b386c596a02549 52636 ntpsec_1.1.9+dfsg1-1.debian.tar.xz 19bd3081f984d642825a65144326648bd72bd606343096c3efbb92d38065a339 8238 ntpsec_1.1.9+dfsg1-1_source.buildinfo Files: fd7aa45efdefbbc8b6cc054cddf06d46 2388 net optional ntpsec_1.1.9+dfsg1-1.dsc a693f7ee6e938ac25c7031c69ab65f02 2233212 net optional ntpsec_1.1.9+dfsg1.orig.tar.xz 476d063303f72ed0e80b112f817effdb 52636 net optional ntpsec_1.1.9+dfsg1-1.debian.tar.xz 574abc0fad47bc0380f13696bba805e3 8238 net optional ntpsec_1.1.9+dfsg1-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE1Ot9lOeOTujs4H+U+HlhmcBFhs4FAl806AkACgkQ+HlhmcBF hs5t9BAAj1yVd9P9vdgs2mnrLn3NlkZnBqySPym1Wq3+ZwZN6sPQoO+s/ZDUFp76 HEF1Qgf71tp34GzIXv/6wvsgTEu2uPlZqYiknjZlQtqt8j59JPV4x15PktYHoGCI o4tmu8gfJDbWZ7/8b4M44vmMKbJl7vPeTa83Epd7sJB2CnTn/IJ8VNJTFB9NVcU7 noXaNKSim8Qd6UxhFGd264VrUxiO9G80TwQGJmTZQ0yztAh+7uw7F4tKYv1zt4dU 6GyqqvAOAswrWC0VawjvWMKc0Fy9J1pz/I6cCkjeB10eX1As1nSGPY/vCIkeUP8V ifcF6jyKMXzO7e/YmmT5lr/DSs6dm3m1poinCRb2pgySMUTeae9OlSiHN6ZuoycC ii1azqYxyNhtYBgqAHZd8cjPIxR3cQ3lcazXlr4mYyW6wNcP3f8YDKllD4sTKlTk NrpZevc9pNO/JeXEAIe8v/8pEsfvhdeD0WpeAEg3rbC4vnIjtYOYU+4r7zKsfhhZ 78jOcPuE4aYWHrH/o9e6JUhxeU18i52mlOIpuHq9ZQ+VBzVUCsV/d/KdGvTz+RPg T0xQUyxJVTbu7wmPTUa1YQQPMbXMEDsXXUV1Cdl39eksjgHjn8We2h6Fzv0Invub fNQu9dyDXUiHbXl1R04kpdDaY1fTafUc6oGPqO8bUuRptOW4sgE= =QvgD -----END PGP SIGNATURE-----
