git: adfda3c395fa - releng/14.0 - rc.conf: correct $ntp_leapfile_sources

From: Philip Paeps <philip_at_FreeBSD.org>
Date: Wed, 14 Feb 2024 06:21:07 UTC
The branch releng/14.0 has been updated by philip:

URL: https://cgit.FreeBSD.org/src/commit/?id=adfda3c395faf108d76ef7772db3804bee5b228f

commit adfda3c395faf108d76ef7772db3804bee5b228f
Author:     Philip Paeps <philip@FreeBSD.org>
AuthorDate: 2023-12-07 05:48:13 +0000
Commit:     Philip Paeps <philip@FreeBSD.org>
CommitDate: 2024-02-14 06:19:31 +0000

    rc.conf: correct $ntp_leapfile_sources
    
    IETF is no longer serving leap-seconds.list.  Update to the canonical place.
    
    This fixes "service ntpd fetch".
    
    IERS is the source of truth for leap seconds. Their leapsecond file is
    updated most quickly and is always right (unlike the IANA one which
    often lags). IERS operates this public service for the express purpose
    of random people downloading it. Their terms of service are compatible
    with open source (we could include this in our release). Rather than
    fighting with questions around this because the IANA one changed
    locations or the auto update script broken, just use this.
    
    This is in preference to the NIST ftp copy. NIST is in the process of
    retiring their FTP services.
    
    Sponsored by:           Netflix
    Reviewed by:            philip, delphij, cy
    Differential Revision:  https://reviews.freebsd.org/D43752
    
    (cherry picked from commit b1c95af45488bef649e9a84890e2414ff80b3a00)
    (cherry picked from commit 163c4342381530cfc5dc78a457cb1f9e355d687a)
    (cherry picked from commit 11da791920ba285f0832f09cb504ac81e35ff8d1)
    (cherry picked from commit ded562d4af9c1a7c6ea48271cbf07a81d7e031c4)
    
    Security:       FreeBSD-EN-24:01.tzdata
    Approved by:    so (gordon)
---
 libexec/rc/rc.conf | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/libexec/rc/rc.conf b/libexec/rc/rc.conf
index f5d0605c8436..f31efb4e2052 100644
--- a/libexec/rc/rc.conf
+++ b/libexec/rc/rc.conf
@@ -421,8 +421,8 @@ ntpd_flags=""			# Additional flags to ntpd
 ntp_src_leapfile="/etc/ntp/leap-seconds"
 				# Initial source for ntpd leapfile
 ntp_db_leapfile="/var/db/ntpd.leap-seconds.list"
-				# Working copy (updated weekly) leapfile
-ntp_leapfile_sources="https://www.ietf.org/timezones/data/leap-seconds.list"
+				# Canonical place to get the leap seconds from
+ntp_leapfile_sources="https://hpiers.obspm.fr/iers/bul/bulc/ntp/leap-seconds.list"
 				# Source from which to fetch leapfile
 ntp_leapfile_fetch_opts="-mq"	# Options to use for ntp leapfile fetch,
 				# e.g. --no-verify-peer