kasp-and-other-dnssec-options.conf revision 1.1.1.2
1/* 2 * Copyright (C) Internet Systems Consortium, Inc. ("ISC") 3 * 4 * SPDX-License-Identifier: MPL-2.0 5 * 6 * This Source Code Form is subject to the terms of the Mozilla Public 7 * License, v. 2.0. If a copy of the MPL was not distributed with this 8 * file, you can obtain one at https://mozilla.org/MPL/2.0/. 9 * 10 * See the COPYRIGHT file distributed with this work for additional 11 * information regarding copyright ownership. 12 */ 13 14include "good-kasp.conf"; 15 16zone "nsec3.net" { 17 type master; 18 file "nsec3.db"; 19 dnssec-policy "test"; 20 auto-dnssec maintain; 21 dnskey-sig-validity 3600; 22 dnssec-dnskey-kskonly yes; 23 dnssec-secure-to-insecure yes; 24 dnssec-update-mode maintain; 25 inline-signing no; 26 sig-validity-interval 3600; 27 update-check-ksk yes; 28}; 29