Home | History | Annotate | Line # | Download | only in policy 
      1 /*
      2  * Copyright (C) Internet Systems Consortium, Inc. ("ISC")
      3  *
      4  * SPDX-License-Identifier: MPL-2.0
      5  *
      6  * This Source Code Form is subject to the terms of the Mozilla Public
      7  * License, v. 2.0.  If a copy of the MPL was not distributed with this
      8  * file, you can obtain one at https://mozilla.org/MPL/2.0/.
      9  *
     10  * See the COPYRIGHT file distributed with this work for additional
     11  * information regarding copyright ownership.
     12  */
     13 
     14 dnssec-policy "zsk-prepub-autosign" {
     15 	signatures-refresh P1W;
     16 	signatures-validity P2W;
     17 	signatures-validity-dnskey P2W;
     18 
     19 	dnskey-ttl 3600;
     20 	publish-safety P1D;
     21 	retire-safety P2D;
     22 	purge-keys PT1H;
     23 
     24 	keys {
     25 		ksk key-directory lifetime unlimited algorithm ecdsa256;
     26 		zsk key-directory lifetime P30D algorithm ecdsa256;
     27 	};
     28 
     29 	zone-propagation-delay PT1H;
     30 	max-zone-ttl 1d;
     31 };
     32 
     33 dnssec-policy "zsk-prepub-manual" {
     34 	manual-mode yes;
     35 
     36 	signatures-refresh P1W;
     37 	signatures-validity P2W;
     38 	signatures-validity-dnskey P2W;
     39 
     40 	dnskey-ttl 3600;
     41 	publish-safety P1D;
     42 	retire-safety P2D;
     43 	purge-keys PT1H;
     44 
     45 	keys {
     46 		ksk key-directory lifetime unlimited algorithm ecdsa256;
     47 		zsk key-directory lifetime P30D algorithm ecdsa256;
     48 	};
     49 
     50 	zone-propagation-delay PT1H;
     51 	max-zone-ttl 1d;
     52 };
     53