2015-12-02 64 views
0

我想爲嵌入式linux系統構建chorny。我現在可以編譯,運行和同步時間。我也可以使用MD5啓用身份驗證,同樣也適用。如何使用SHA哈希身份驗證構建chrony?

我想不出如何啓用SHA散列。使用它會在構建包的時候,但是沒有配置的選項。有沒有人做過?

感謝

這是輸出,如果我設置在我的chrony.keys哈希類型的文件,以SHA1:

[email protected]:~# chronyd -d 
2000-01-08T00:54:56Z chronyd version 2.2 starting (+CMDMON +NTP +REFCLOCK +RTC -PRIVDROP -SCFILTER -SECHASH +ASYNCDNS +IPV6 -DEBUG) 
2000-01-08T00:54:56Z Unknown hash function in key 12 
2000-01-08T00:54:56Z Initial frequency 1.355 ppm 

當我運行./configure -hi得到這樣的:

`configure' configures this package to adapt to many kinds of systems. 

Usage: ./configure [OPTION]... 

Defaults for the options are specified in brackets. 

Configuration: 
    -h, --help    display this help and exit 

Installation directories: 
    --prefix=PREFIX   install architecture-independent files in PREFIX 
          [/usr/local] 
    --exec-prefix=EPREFIX install architecture-dependent files in EPREFIX 
          [PREFIX] 

By default, `make install' will install all the files in 
`/usr/local/bin', `/usr/local/lib' etc. You can specify 
an installation prefix other than `/usr/local' using `--prefix', 
for instance `--prefix=/home/user'. 

For better control, use the options below. 
    --disable-readline  Disable line editing support 
    --without-readline  Don't use GNU readline even if it is available 
    --without-editline  Don't use editline even if it is available 
    --readline-dir=DIR  Specify parent of readline include and lib directories 
    --readline-inc-dir=DIR Specify where readline include directory is 
    --readline-lib-dir=DIR Specify where readline lib directory is 
    --with-ncurses-library=DIR Specify where ncurses lib directory is 
    --disable-sechash  Disable support for hashes other than MD5 
    --without-nss   Don't use NSS even if it is available 
    --without-tomcrypt  Don't use libtomcrypt even if it is available 
    --disable-cmdmon  Disable command and monitoring support 
    --disable-ntp   Disable NTP support 
    --disable-refclock  Disable reference clock support 
    --disable-phc   Disable PHC refclock driver 
    --disable-pps   Disable PPS refclock driver 
    --disable-ipv6   Disable IPv6 support 
    --disable-rtc   Don't include RTC even on Linux 
    --disable-privdrop  Disable support for dropping root privileges 
    --without-libcap  Don't use libcap even if it is available 
    --enable-scfilter  Enable support for system call filtering 
    --without-seccomp  Don't use seccomp even if it is available 
    --disable-asyncdns  Disable asynchronous name resolving 
    --disable-forcednsretry Don't retry on permanent DNS error 
    --with-ntp-era=SECONDS Specify earliest assumed NTP time in seconds 
         since 1970-01-01 [50*365 days ago] 
    --with-user=USER  Specify default chronyd user [root] 
    --with-hwclockfile=PATH Specify default path to hwclock(8) adjtime file 
    --with-sendmail=PATH Path to sendmail binary [/usr/lib/sendmail] 
    --enable-debug   Enable debugging support 

Fine tuning of the installation directories: 
    --sysconfdir=DIR  chrony.conf location [/etc] 
    --bindir=DIR   user executables [EPREFIX/bin] 
    --sbindir=DIR   system admin executables [EPREFIX/sbin] 
    --datarootdir=DIR  data root [PREFIX/share] 
    --infodir=DIR   info documentation [DATAROOTDIR/info] 
    --mandir=DIR   man documentation [DATAROOTDIR/man] 
    --docdir=DIR   documentation root [DATAROOTDIR/doc/chrony] 
    --localstatedir=DIR modifiable single-machine data [/var] 
    --chronysockdir=DIR location for chrony sockets [LOCALSTATEDIR/run/chrony] 
    --chronyvardir=DIR  location for chrony data [LOCALSTATEDIR/lib/chrony] 

Overriding system detection when cross-compiling: 
    --host-system=OS  Specify system name (uname -s) 
    --host-release=REL  Specify system release (uname -r) 
    --host-machine=CPU  Specify machine (uname -m) 

Some influential environment variables: 
    CC   C compiler command 
    CFLAGS  C compiler flags 
    CPPFLAGS C preprocessor flags, e.g. -I<include dir> if you have 
       headers in a nonstandard directory <include dir> 
    LDFLAGS  linker flags, e.g. -L<lib dir> if you have libraries in a 
       nonstandard directory <lib dir> 

Use these variables to override the choices made by `configure' or to help 
it to find libraries and programs with nonstandard names/locations. 

回答

0

安全散列需要​​或NSS,並且如果系統中存在這些庫中的任何一個,默認情況下會在配置時啓用。

有沒有configure選項來啓用它們,但也有選項來禁用它們:

--disable-sechash  Disable support for hashes other than MD5 
--without-nss   Don't use NSS even if it is available 
--without-tomcrypt  Don't use libtomcrypt even if it is available 

在chrony輸出的第一行-SECHASH表明,無論是安全散列選項都在配置時禁用,或者(更可能)您沒有安裝必要的庫。

相關問題