.\" Process this file with
.\" groff -man -Tascii foo.1
.\"
.TH TLSDATE 1 "OCTOBER 2012" Linux "User Manuals"
.SH NAME
tlsdate-helper \- secure parasitic rdate replacement
.SH SYNOPSIS
.B tlsdate-helper host port protocol ca_racket verbose certdir setclock \
showtime timewarp leapaway proxy-type://proxyhost:proxyport
.SH DESCRIPTION
.B tlsdate-helper
is a tool for setting the system clock by hand or by communication
with the network. It does not set the Real Time Clock. It is designed to be as
secure as TLS (RFC 2246) but of course the security of TLS is often reduced to
whichever CA racket you believe is trustworthy. By default, tlsdate-helper
trusts your local CA root store - so any of these companies could assist in a
MITM attack against you and you'd be screwed.

The proxy argument expects HTTP, SOCKS4A or SOCKS5 formatted as followed:

 http://127.0.0.1:8118
 socks4a://127.0.0.1:9050
 socks5://127.0.0.1:9050

This tool is designed to be run by hand or as a system daemon. It must be
run as root or otherwise have the proper caps; it will not be able to set
the system time without running as root or another privileged user.
.SH BUGS
It's likely! Let us know by contacting jacob@appelbaum.net

Note that
.B tlsdate(1)
is still in Alpha, and may not work as expected.
.SH AUTHOR
Jacob Appelbaum <jacob at appelbaum dot net>
.SH "SEE ALSO"
.B tlsdate(1),
.B tlsdated(1)
.B tlsdate-routeup(1)
.B tlsdate-dbus-announce(1)