From: Miroslav Lichvar Date: Thu, 2 Feb 2023 13:43:19 +0000 (+0100) Subject: doc: describe minimum useful ntsrefresh X-Git-Tag: 4.4-pre1~39 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=ecfbde9872e4adda7f0de03b775f55653730c825;p=thirdparty%2Fchrony.git doc: describe minimum useful ntsrefresh --- diff --git a/doc/chrony.conf.adoc b/doc/chrony.conf.adoc index 6d96f649..a2148980 100644 --- a/doc/chrony.conf.adoc +++ b/doc/chrony.conf.adoc @@ -827,6 +827,10 @@ This directory is used also by the <> to save keys. This directive specifies the maximum interval between NTS-KE handshakes (in seconds) in order to refresh the keys authenticating NTP packets. The default value is 2419200 (4 weeks) and the maximum value is 2^31-1 (68 years). ++ +The interval must be longer than polling intervals of all configured NTP +sources using NTS, otherwise the source with a longer polling interval will +refresh the keys on each poll and no NTP packets will be exchanged. [[ntstrustedcerts]]*ntstrustedcerts* [_set-ID_] _file_|_directory_:: This directive specifies a file or directory containing certificates (in the