rc.conf: correct $ntp_leapfile_sources

IETF is no longer serving leap-seconds.list.  Update to the canonical place.

This fixes "service ntpd fetch".

IERS is the source of truth for leap seconds. Their leapsecond file is
updated most quickly and is always right (unlike the IANA one which
often lags). IERS operates this public service for the express purpose
of random people downloading it. Their terms of service are compatible
with open source (we could include this in our release). Rather than
fighting with questions around this because the IANA one changed
locations or the auto update script broken, just use this.

This is in preference to the NIST ftp copy. NIST is in the process of
retiring their FTP services.

Sponsored by:		Netflix
Reviewed by:		philip, delphij, cy
Differential Revision:	https://reviews.freebsd.org/D43752

(cherry picked from commit b1c95af45488bef649e9a84890e2414ff80b3a00)
(cherry picked from commit 74a8c6da4f28e691c169aa502713a5aaebc00584)
(cherry picked from commit 11da791920ba285f0832f09cb504ac81e35ff8d1)
(cherry picked from commit 0eea8292ae8c8e9119520ce54aa82cae491d83b9)

Security:       FreeBSD-EN-24:01.tzdata
Approved by:    so (gordon)

libexec/rc/rc.conf

@@ -418,8 +418,8 @@ ntpd_flags=""			# Additional flags to ntpd
 ntp_src_leapfile="/etc/ntp/leap-seconds"
 				# Initial source for ntpd leapfile
 ntp_db_leapfile="/var/db/ntpd.leap-seconds.list"
-				# Working copy (updated weekly) leapfile
-ntp_leapfile_sources="https://www.ietf.org/timezones/data/leap-seconds.list"
+				# Canonical place to get the leap seconds from
+ntp_leapfile_sources="https://hpiers.obspm.fr/iers/bul/bulc/ntp/leap-seconds.list"
 				# Source from which to fetch leapfile
 ntp_leapfile_fetch_opts="-mq"	# Options to use for ntp leapfile fetch,
 				# e.g. --no-verify-peer