1TLSDATE(1) User Manuals TLSDATE(1)
2
3
4
6 tlsdate-helper - secure parasitic rdate replacement
7
9 tlsdate-helper host port protocol ca_racket verbose certdir setclock
10 showtime timewarp leapaway proxy-type://proxyhost:proxyport httpmode
11
13 tlsdate-helper is a tool for setting the system clock by hand or by
14 communication with the network. It does not set the Real Time Clock. It
15 is designed to be as secure as TLS (RFC 2246) but of course the secu‐
16 rity of TLS is often reduced to whichever CA racket you believe is
17 trustworthy. By default, tlsdate-helper trusts your local CA root store
18 - so any of these companies could assist in a MITM attack against you
19 and you'd be screwed.
20
21 The proxy argument expects HTTP, SOCKS4A or SOCKS5 formatted as fol‐
22 lowed:
23
24 http://127.0.0.1:8118
25 socks4a://127.0.0.1:9050
26 socks5://127.0.0.1:9050
27
28 This tool is designed to be run by hand or as a system daemon. It must
29 be run as root or otherwise have the proper caps; it will not be able
30 to set the system time without running as root or another privileged
31 user.
32
34 It's likely! Let us know by contacting jacob@appelbaum.net
35
36 Note that tlsdate(1) is in Beta, and may not work as expected.
37
39 Jacob Appelbaum <jacob at appelbaum dot net>
40
42 tlsdate(1), tlsdated(8), tlsdated.conf(5)
43
44
45
46Linux OCTOBER 2012 TLSDATE(1)