kasp.conf.in revision 1.1.1.3
1169695Skan/* 2169695Skan * Copyright (C) Internet Systems Consortium, Inc. ("ISC") 3169695Skan * 4169695Skan * SPDX-License-Identifier: MPL-2.0 5169695Skan * 6169695Skan * This Source Code Form is subject to the terms of the Mozilla Public 7169695Skan * License, v. 2.0. If a copy of the MPL was not distributed with this 8169695Skan * file, you can obtain one at https://mozilla.org/MPL/2.0/. 9169695Skan * 10169695Skan * See the COPYRIGHT file distributed with this work for additional 11169695Skan * information regarding copyright ownership. 12169695Skan */ 13169695Skan 14169695Skaninclude "policies/kasp-fips.conf"; 15169695Skan 16169695Skandnssec-policy "rsasha1" { 17169695Skan dnskey-ttl 1234; 18169695Skan 19169695Skan keys { 20169695Skan ksk key-directory lifetime P10Y algorithm 5; 21169695Skan zsk key-directory lifetime P5Y algorithm 5; 22169695Skan zsk key-directory lifetime P1Y algorithm 5 2000; 23169695Skan }; 24169695Skan}; 25169695Skan 26169695Skandnssec-policy "rsasha1-nsec3" { 27169695Skan dnskey-ttl 1234; 28169695Skan 29169695Skan keys { 30169695Skan ksk key-directory lifetime P10Y algorithm 7; 31169695Skan zsk key-directory lifetime P5Y algorithm 7; 32169695Skan zsk key-directory lifetime P1Y algorithm 7 2000; 33169695Skan }; 34169695Skan}; 35169695Skan