aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorPhilip Paeps <philip@FreeBSD.org>2023-12-07 05:48:13 +0000
committerPhilip Paeps <philip@FreeBSD.org>2024-02-14 06:19:31 +0000
commitadfda3c395faf108d76ef7772db3804bee5b228f (patch)
treece8ddbeef6d1d1035b749a5266edfc1b64816396
parenta3b7bafd2acc4ddfba18c8ad990b29c407892ed6 (diff)
downloadsrc-adfda3c395faf108d76ef7772db3804bee5b228f.tar.gz
src-adfda3c395faf108d76ef7772db3804bee5b228f.zip
rc.conf: correct $ntp_leapfile_sources
IETF is no longer serving leap-seconds.list. Update to the canonical place. This fixes "service ntpd fetch". IERS is the source of truth for leap seconds. Their leapsecond file is updated most quickly and is always right (unlike the IANA one which often lags). IERS operates this public service for the express purpose of random people downloading it. Their terms of service are compatible with open source (we could include this in our release). Rather than fighting with questions around this because the IANA one changed locations or the auto update script broken, just use this. This is in preference to the NIST ftp copy. NIST is in the process of retiring their FTP services. Sponsored by: Netflix Reviewed by: philip, delphij, cy Differential Revision: https://reviews.freebsd.org/D43752 (cherry picked from commit b1c95af45488bef649e9a84890e2414ff80b3a00) (cherry picked from commit 163c4342381530cfc5dc78a457cb1f9e355d687a) (cherry picked from commit 11da791920ba285f0832f09cb504ac81e35ff8d1) (cherry picked from commit ded562d4af9c1a7c6ea48271cbf07a81d7e031c4) Security: FreeBSD-EN-24:01.tzdata Approved by: so (gordon)
-rw-r--r--libexec/rc/rc.conf4
1 files changed, 2 insertions, 2 deletions
diff --git a/libexec/rc/rc.conf b/libexec/rc/rc.conf
index f5d0605c8436..f31efb4e2052 100644
--- a/libexec/rc/rc.conf
+++ b/libexec/rc/rc.conf
@@ -421,8 +421,8 @@ ntpd_flags="" # Additional flags to ntpd
ntp_src_leapfile="/etc/ntp/leap-seconds"
# Initial source for ntpd leapfile
ntp_db_leapfile="/var/db/ntpd.leap-seconds.list"
- # Working copy (updated weekly) leapfile
-ntp_leapfile_sources="https://www.ietf.org/timezones/data/leap-seconds.list"
+ # Canonical place to get the leap seconds from
+ntp_leapfile_sources="https://hpiers.obspm.fr/iers/bul/bulc/ntp/leap-seconds.list"
# Source from which to fetch leapfile
ntp_leapfile_fetch_opts="-mq" # Options to use for ntp leapfile fetch,
# e.g. --no-verify-peer