1 /* 2 * Copyright (C) Internet Systems Consortium, Inc. ("ISC") 3 * 4 * SPDX-License-Identifier: MPL-2.0 5 * 6 * This Source Code Form is subject to the terms of the Mozilla Public 7 * License, v. 2.0. If a copy of the MPL was not distributed with this 8 * file, you can obtain one at https://mozilla.org/MPL/2.0/. 9 * 10 * See the COPYRIGHT file distributed with this work for additional 11 * information regarding copyright ownership. 12 */ 13 14 trust-anchors { 15 example. static-key 257 3 14 "@ksk_public_key@"; 16 17 /* 18 * The key tag in the trust anchor must match that of the revoked 19 * truncated self-signed key in the truncated.selfsigned. zone. 20 * 21 * The DNSKEY contents are intentionally different here, because the 22 * key doesn't have the revoked bit here and that flag is part of the 23 * key tag. The following decodes to key tag 33167, which is the same 24 * as the revoked truncated key in the zone file. 25 */ 26 truncated.selfsigned. static-key 257 3 14 "fYA="; 27 }; 28