kasp.conf.in revision 1.1.1.3
1169695Skan/*
2169695Skan * Copyright (C) Internet Systems Consortium, Inc. ("ISC")
3169695Skan *
4169695Skan * SPDX-License-Identifier: MPL-2.0
5169695Skan *
6169695Skan * This Source Code Form is subject to the terms of the Mozilla Public
7169695Skan * License, v. 2.0.  If a copy of the MPL was not distributed with this
8169695Skan * file, you can obtain one at https://mozilla.org/MPL/2.0/.
9169695Skan *
10169695Skan * See the COPYRIGHT file distributed with this work for additional
11169695Skan * information regarding copyright ownership.
12169695Skan */
13169695Skan
14169695Skaninclude "policies/kasp-fips.conf";
15169695Skan
16169695Skandnssec-policy "rsasha1" {
17169695Skan	dnskey-ttl 1234;
18169695Skan
19169695Skan	keys {
20169695Skan		ksk key-directory lifetime P10Y algorithm 5;
21169695Skan		zsk key-directory lifetime P5Y  algorithm 5;
22169695Skan		zsk key-directory lifetime P1Y  algorithm 5 2000;
23169695Skan	};
24169695Skan};
25169695Skan
26169695Skandnssec-policy "rsasha1-nsec3" {
27169695Skan	dnskey-ttl 1234;
28169695Skan
29169695Skan	keys {
30169695Skan		ksk key-directory lifetime P10Y algorithm 7;
31169695Skan		zsk key-directory lifetime P5Y  algorithm 7;
32169695Skan		zsk key-directory lifetime P1Y  algorithm 7 2000;
33169695Skan	};
34169695Skan};
35169695Skan