Re: linux-ipsec: Re:

>>>>> "Angelos" == Angelos D Keromytis <angelos@dsl.cis.upenn.edu> writes:

 Angelos> -----BEGIN PGP SIGNED MESSAGE----- To: linux-ipsec@clinet.fi  Angelos> Subject: Re: Cc: Date: 06/13/98, 16:11:47

>> The machines are all comming up on NTP as with things like IKE &

 Angelos> IKE has no requirement for sync'ed clocks. - -Angelos

Not unless you use certificates for authentication -- then your clocks have to be good enough that expired certificates don't look valid and vice versa. That's a pretty loose requirement but you DO want to make sure your clock isn't off by several days.

(That includes worrying about attacks via NTP, if you're using NTP.)

        paul Received on Mon Jun 15 12:40:30 1998

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related lists.freeswan.org Links 1998-fall 1998-spring 1998-summer 1998-winter 1999-winter announce briefs bugs design freeswan-list hipsec ietf-sectest users users-admin Request more information about Pantek