From: Miroslav Lichvar Date: Tue, 18 Oct 2022 08:22:23 +0000 (+0200) Subject: doc: improve ntsrotate description X-Git-Tag: 4.4-pre1~78 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=17d2291a84b56904e473ae7ae0ff29831059abfb;p=thirdparty%2Fchrony.git doc: improve ntsrotate description --- diff --git a/doc/chrony.conf.adoc b/doc/chrony.conf.adoc index 2cf53269..761d0420 100644 --- a/doc/chrony.conf.adoc +++ b/doc/chrony.conf.adoc @@ -1735,7 +1735,10 @@ save the keys to the _ntskeys_ file and will reload the keys from the file when the <> command is issued in *chronyc*. The file can be periodically copied from another server running *chronyd* (which does not have *ntsrotate* set to 0) in order to have one or more servers dedicated -to NTS-KE. The NTS-KE servers need to be configured with the +to NTS-KE. The file includes the subsequent key to which the NTS-KE server will +switch on the next rotation, i.e. the process copying and reloading the file +does not need to be timed precisely (it can be delayed by up to one rotation +interval). The NTS-KE servers need to be configured with the <> directive to point the clients to the right NTP server. +