mirror of
https://github.com/isc-projects/bind9.git
synced 2026-02-25 02:42:33 -05:00
f6096b958c
4349. [contrib] kasp2policy: A python script to create a DNSSEC
policy file from an OpenDNSSEC KASP XML file.
4348. [func] dnssec-keymgr: A new python-based DNSSEC key
management utility, which reads a policy definition
file and can create or update DNSSEC keys as needed
to ensure that a zone's keys match policy, roll over
correctly on schedule, etc. Thanks to Sebastian
Castro for assistance in development. [RT #39211]
24 lines
461 B
Text
24 lines
461 B
Text
# A default policy that will
|
|
# amaze you and your friends
|
|
policy Policy1 {
|
|
algorithm RSASHA1;
|
|
keyttl 60;
|
|
key-size ksk 2048;
|
|
key-size zsk 2048;
|
|
roll-period ksk 2400;
|
|
roll-period zsk 1500;
|
|
standby ksk 1;
|
|
standby zsk 1;
|
|
};
|
|
|
|
# A default policy that will amaze you and your friends
|
|
policy Policy2 {
|
|
algorithm NSEC3RSASHA1;
|
|
keyttl 900;
|
|
key-size ksk 2048;
|
|
key-size zsk 2048;
|
|
roll-period ksk 2700;
|
|
roll-period zsk 1500;
|
|
standby ksk 1;
|
|
standby zsk 1;
|
|
};
|