]> git.ipfire.org Git - thirdparty/chrony.git/commit
ntp: don't accept packets with unexpected authentication
authorMiroslav Lichvar <mlichvar@redhat.com>
Mon, 3 Feb 2020 15:04:08 +0000 (16:04 +0100)
committerMiroslav Lichvar <mlichvar@redhat.com>
Thu, 5 Mar 2020 15:02:15 +0000 (16:02 +0100)
commit5ed9b888ff2e9d3718971c9ec1e474d4bcde194f
treea6a31780d05105d1abd674d8a3c96be418fdc698
parent7661a6e95b7292c3ab12246920c389d740684c91
ntp: don't accept packets with unexpected authentication

If authentication is not enabled in configuration, responses are not
expected to be authenticated. Handle such responses as having failed
authentication.

A case where this could happen is a misconfigured symmetric association
where only one peer has specified the other with a key. Before this
change synchronization would work in one direction and used packets
with an asymmetric length.
ntp_auth.c
test/unit/ntp_core.c