1/* 2 * Copyright (C) Internet Systems Consortium, Inc. ("ISC") 3 * 4 * SPDX-License-Identifier: MPL-2.0 5 * 6 * This Source Code Form is subject to the terms of the Mozilla Public 7 * License, v. 2.0. If a copy of the MPL was not distributed with this 8 * file, you can obtain one at https://mozilla.org/MPL/2.0/. 9 * 10 * See the COPYRIGHT file distributed with this work for additional 11 * information regarding copyright ownership. 12 */ 13 14include "policies/kasp-fips.conf"; 15 16dnssec-policy "rsasha1" { 17 signatures-refresh P5D; 18 signatures-validity 30d; 19 signatures-validity-dnskey 30d; 20 21 keys { 22 ksk lifetime unlimited algorithm rsasha1; 23 zsk lifetime unlimited algorithm rsasha1; 24 }; 25 26 dnskey-ttl 1h; 27 publish-safety PT1H; 28 retire-safety 2h; 29 zone-propagation-delay 3600; 30 max-zone-ttl 6h; 31 parent-propagation-delay pt1h; 32 parent-ds-ttl 7200; 33}; 34