Re: NTS issue

On Fri, Apr 29, 2022 at 07:00:13PM +0200, Timothy D wrote:
> server nts.netnod.se iburst nts
> server ptbtime1.ptb.de iburst nts
> ntsdumpdir /var/lib/chrony

> Apr 29 18:56:15 repo.x.local systemd[1]: Started NTP client/server.
> Apr 29 18:56:16 repo.x.local chronyd[5507]: Fatal error : Could not
> initialise priority cache : No or insufficient priorities were set.

That looks like chronyd cannot select TLS1.3 or maybe a cipher.

Do you see the same error when you run the following command?

  gnutls-cli -p 4460 --alpn=ntske/1 --logfile /dev/stderr \
	ptbtime1.ptb.de < /dev/null > /dev/null

Do you see any SELinux errors for chrony, e.g. printed by this
command?

  grep AVC.*chrony /var/log/audit/audit.log

Do you have a custom crypto policy configured in
/etc/crypto-policies/?

  cat /etc/crypto-policies/back-ends/gnutls.config

should show the current gnutls configuration.

-- 
Miroslav Lichvar


-- 
To unsubscribe email chrony-users-request-kWFZVVI9zxvPqho9SqqRMmD2FQJk+8+b@public.gmane.org 
with "unsubscribe" in the subject.
For help email chrony-users-request-kWFZVVI9zxvPqho9SqqRMmD2FQJk+8+b@public.gmane.org 
with "help" in the subject.
Trouble?  Email [email protected]