Changed

• Updated dependencies.

Fixed

• Fixed issue that could result in excessive CPU usage on receiving NTS messages asking for many cookies.
• Fixed network-triggerable log spam.

Added

• Support for the experimental NTS pool is now possible with configuration changes.

Changed

• NTPv5 draft support now targets draft 6.
• Reworked NTS parsing to be easier to maintain.
• Updated dependencies.
• Cap ntp-ctl control socket input size for defense in depth.

Fixed

• Fixed bug that caused force-sync to fail when only a single server was configured.
• Fixed bug in parsing NTPv4 requests with a MAC.
• Fixed bug in odd-sized NTPv5 bloom filter requests.
• Fixed incorrect reference to configuration field warn-on-jump in log output.

Added

• Support for keeping connections to experimental NTS pools alive longterm, saving resource usage for pools.

Changed

• Updated dependencies
• Cap ntp-ctl control socket input size for defense in depth.

Fixed

• Fixed bug in parsing NTPv4 requests with a MAC.
• Fixed bug in odd-sized NTPv5 bloom filter requests.
• Fixed incorrect reference to configuration field warn-on-jump in log output.

Added

• Support for the experimental NTS pool is now possible with configuration changes.

Changed

• NTPv5 draft support now targets draft 6.
• Reworked NTS parsing to be easier to maintain.
• Updated dependencies.

Fixed

• Fixed bug that caused force-sync to fail when only a single server was configured.

Fixed

• Fixed bug that could cause a message to pingpong between two servers indefinitely.

Fixed

• Fixed mistake in the calculation of root dispersion used in serving and observability.

Added

• Support draft versions of NTPv5 with configuration changes.
• Allow disabling ntp versions in the server.

Changed

• NTPv5 draft support now targets draft 4.
• Time jumps now emit warnings.
• Updated dependencies.

Fixed

• Fixed a crash in force-sync when using many servers.
• Fixed root dispersion of the server not properly updating over time.
• Fixed a bug in handling unsigned ntp deny messages.

This releases fixes two related low severity vulnerabilities in our NTS cookie parsing, please see the related advisory.

Added

• Support for PPS based sources (this support can be disabled with a compile flag for now)
• Per source configuration of poll intervals
• Allow setting a custom reference id for stratum 1 servers

Changed

• Our algorithm can now handle periodic sources
• ntpd-rs runs single-threaded when only configured as a client, servers still run multithreaded
• The reference timestamp field is now set to the truncated receive timestamp instead of being zero
• Support of rustls 0.21 and 0.22 is removed
• Certificate validation is now done through rustls-platform-verifier, following platform certificate validation more closely
• Updated dependencies

Fixed

• Fixed parsing of IPv6 addresses
• Fixed incorrect display of date in force-sync command
• Fixed a client denial of service vulnerability with zero-sized NTS cookies
• Fixed a client denial of service vulnerability with NTS cookies that are too large

Added

• Support for GPS based sources via a GPSd socket
• Added a setting to allow disabling of colors in our logs (observability.ansi-colors)

Changed

• Fallback to V4 should V5 not work for some reason (if NTPv5 is enabled)
• Make the NTP version of a source configurable
• We now support rustls from 0.21 and up, to allow compilation on more targets

Fixed

• Force sync did not work when a single source was configured
• Fix incorrect indexing in decode of ReferenceIdRequest for NTPv5 messages

Changed

• Updated dependencies. Includes fixes for RUSTSEC-2024-0399.