Home | History | Annotate | Line # | Download | only in ns3 
      1 /*
      2  * Copyright (C) Internet Systems Consortium, Inc. ("ISC")
      3  *
      4  * SPDX-License-Identifier: MPL-2.0
      5  *
      6  * This Source Code Form is subject to the terms of the Mozilla Public
      7  * License, v. 2.0.  If a copy of the MPL was not distributed with this
      8  * file, you can obtain one at https://mozilla.org/MPL/2.0/.
      9  *
     10  * See the COPYRIGHT file distributed with this work for additional
     11  * information regarding copyright ownership.
     12  */
     13 
     14 dnssec-policy "csk-algoroll-kasp" {
     15 	signatures-refresh P5D;
     16 	signatures-validity 30d;
     17 	signatures-validity-dnskey 30d;
     18 
     19 	keys {
     20 		csk lifetime unlimited algorithm ecdsa256;
     21 	};
     22 
     23 	dnskey-ttl 1h;
     24 	publish-safety PT1H;
     25 	retire-safety 2h;
     26 	zone-propagation-delay 3600;
     27 	max-zone-ttl 6h;
     28 	parent-propagation-delay pt1h;
     29 	parent-ds-ttl 7200;
     30 };
     31 
     32 dnssec-policy "csk-algoroll-manual" {
     33 	manual-mode yes;
     34 
     35 	signatures-refresh P5D;
     36 	signatures-validity 30d;
     37 	signatures-validity-dnskey 30d;
     38 
     39 	keys {
     40 		csk lifetime unlimited algorithm ecdsa256;
     41 	};
     42 
     43 	dnskey-ttl 1h;
     44 	publish-safety PT1H;
     45 	retire-safety 2h;
     46 	zone-propagation-delay 3600;
     47 	max-zone-ttl 6h;
     48 	parent-propagation-delay pt1h;
     49 	parent-ds-ttl 7200;
     50 };
     51