Skip site navigation (1)Skip section navigation (2)

FreeBSD Manual Pages

  
 
  

home | help
TLSDATE(1)			  User Manuals			      TLSDATE(1)

NAME
     tlsdate-helper - secure parasitic rdate replacement

SYNOPSIS
     tlsdate-helper  host port protocol ca_racket verbose certdir setclock show-
     time timewarp leapaway proxy-type://proxyhost:proxyport httpmode

DESCRIPTION
     tlsdate-helper is a tool for setting the system clock by hand or by  commu-
     nication  with  the network. It does not set the Real Time Clock. It is de-
     signed to be as secure as TLS (RFC 2246) but of course the security of  TLS
     is  often reduced to whichever CA racket you believe is trustworthy. By de-
     fault, tlsdate-helper trusts your local CA root store -  so  any  of  these
     companies could assist in a MITM attack against you and you'd be screwed.

     The proxy argument expects HTTP, SOCKS4A or SOCKS5 formatted as followed:

      http://127.0.0.1:8118
      socks4a://127.0.0.1:9050
      socks5://127.0.0.1:9050

     This  tool  is designed to be run by hand or as a system daemon. It must be
     run as root or otherwise have the proper caps; it will not be able  to  set
     the system time without running as root or another privileged user.

BUGS
     It's likely! Let us know by contacting jacob@appelbaum.net

     Note that tlsdate(1) is in Beta, and may not work as expected.

AUTHOR
     Jacob Appelbaum <jacob at appelbaum dot net>

SEE ALSO
     tlsdate(1), tlsdated(8), tlsdated.conf(5)

Linux				  OCTOBER 2012			      TLSDATE(1)

Want to link to this manual page? Use this URL:
<https://man.freebsd.org/cgi/man.cgi?query=tlsdate-helper&sektion=1&manpath=FreeBSD+Ports+15.1.quarterly>

home | help