1/*
2 * Copyright (C) Internet Systems Consortium, Inc. ("ISC")
3 *
4 * SPDX-License-Identifier: MPL-2.0
5 *
6 * This Source Code Form is subject to the terms of the Mozilla Public
7 * License, v. 2.0.  If a copy of the MPL was not distributed with this
8 * file, you can obtain one at https://mozilla.org/MPL/2.0/.
9 *
10 * See the COPYRIGHT file distributed with this work for additional
11 * information regarding copyright ownership.
12 */
13
14include "policies/kasp-fips.conf";
15
16dnssec-policy "rsasha1" {
17	signatures-refresh P5D;
18	signatures-validity 30d;
19	signatures-validity-dnskey 30d;
20
21	keys {
22		ksk lifetime unlimited algorithm rsasha1;
23		zsk lifetime unlimited algorithm rsasha1;
24	};
25
26	dnskey-ttl 1h;
27	publish-safety PT1H;
28	retire-safety 2h;
29	zone-propagation-delay 3600;
30	max-zone-ttl 6h;
31	parent-propagation-delay pt1h;
32	parent-ds-ttl 7200;
33};
34