Home | History | Annotate | Line # | Download | only in ns3 
      1 /*
      2  * Copyright (C) Internet Systems Consortium, Inc. ("ISC")
      3  *
      4  * SPDX-License-Identifier: MPL-2.0
      5  *
      6  * This Source Code Form is subject to the terms of the Mozilla Public
      7  * License, v. 2.0.  If a copy of the MPL was not distributed with this
      8  * file, you can obtain one at https://mozilla.org/MPL/2.0/.
      9  *
     10  * See the COPYRIGHT file distributed with this work for additional
     11  * information regarding copyright ownership.
     12  */
     13 
     14 dnssec-policy "ksk-doubleksk-autosign" {
     15 	signatures-refresh P1W;
     16 	signatures-validity P2W;
     17 	signatures-validity-dnskey P2W;
     18 
     19 	dnskey-ttl 2h;
     20 	publish-safety P1D;
     21 	retire-safety P2D;
     22 	purge-keys PT1H;
     23 
     24 	cdnskey no;
     25 	keys {
     26 		ksk key-directory lifetime P60D algorithm ecdsa256;
     27 		zsk key-directory lifetime unlimited algorithm ecdsa256;
     28 	};
     29 
     30 	zone-propagation-delay PT1H;
     31 	max-zone-ttl 1d;
     32 
     33 	parent-ds-ttl 3600;
     34 	parent-propagation-delay PT1H;
     35 };
     36 
     37 dnssec-policy "ksk-doubleksk-manual" {
     38 	manual-mode yes;
     39 
     40 	signatures-refresh P1W;
     41 	signatures-validity P2W;
     42 	signatures-validity-dnskey P2W;
     43 
     44 	dnskey-ttl 2h;
     45 	publish-safety P1D;
     46 	retire-safety P2D;
     47 	purge-keys PT1H;
     48 
     49 	cdnskey no;
     50 	keys {
     51 		ksk key-directory lifetime P60D algorithm ecdsa256;
     52 		zsk key-directory lifetime unlimited algorithm ecdsa256;
     53 	};
     54 
     55 	zone-propagation-delay PT1H;
     56 	max-zone-ttl 1d;
     57 
     58 	parent-ds-ttl 3600;
     59 	parent-propagation-delay PT1H;
     60 };
     61