mirror of
https://github.com/isc-projects/bind9.git
synced 2026-02-26 03:11:56 -05:00
170 lines
3.1 KiB
Text
170 lines
3.1 KiB
Text
policy default:
|
|
inherits global
|
|
directory None
|
|
algorithm None
|
|
coverage None
|
|
ksk_keysize None
|
|
zsk_keysize None
|
|
ksk_rollperiod None
|
|
zsk_rollperiod None
|
|
ksk_prepublish None
|
|
ksk_postpublish None
|
|
zsk_prepublish None
|
|
zsk_postpublish None
|
|
ksk_standby None
|
|
zsk_standby None
|
|
keyttl None
|
|
|
|
policy global:
|
|
inherits None
|
|
directory None
|
|
algorithm RSASHA256
|
|
coverage 15552000
|
|
ksk_keysize 2048
|
|
zsk_keysize 2048
|
|
ksk_rollperiod None
|
|
zsk_rollperiod 31536000
|
|
ksk_prepublish 2592000
|
|
ksk_postpublish 2592000
|
|
zsk_prepublish 2592000
|
|
zsk_postpublish 2592000
|
|
ksk_standby None
|
|
zsk_standby None
|
|
keyttl 3600
|
|
|
|
constructed policy example.com:
|
|
inherits global
|
|
directory None
|
|
algorithm RSASHA256
|
|
coverage 15552000
|
|
ksk_keysize 2048
|
|
zsk_keysize 2048
|
|
ksk_rollperiod None
|
|
zsk_rollperiod 31536000
|
|
ksk_prepublish 2592000
|
|
ksk_postpublish 2592000
|
|
zsk_prepublish 2592000
|
|
zsk_postpublish 2592000
|
|
ksk_standby None
|
|
zsk_standby None
|
|
keyttl 3600
|
|
|
|
policy default:
|
|
inherits None
|
|
directory "keydir"
|
|
algorithm RSASHA1
|
|
coverage 31536000
|
|
ksk_keysize None
|
|
zsk_keysize None
|
|
ksk_rollperiod None
|
|
zsk_rollperiod 15552000
|
|
ksk_prepublish None
|
|
ksk_postpublish None
|
|
zsk_prepublish 3628800
|
|
zsk_postpublish 3628800
|
|
ksk_standby None
|
|
zsk_standby None
|
|
keyttl 3600
|
|
|
|
zone policy example.com:
|
|
inherits extra
|
|
directory "keydir"
|
|
algorithm NSEC3RSASHA1
|
|
coverage 12960000
|
|
ksk_keysize 2048
|
|
zsk_keysize 2048
|
|
ksk_rollperiod 31536000
|
|
zsk_rollperiod 7776000
|
|
ksk_prepublish 7776000
|
|
ksk_postpublish None
|
|
zsk_prepublish 3628800
|
|
zsk_postpublish 604800
|
|
ksk_standby None
|
|
zsk_standby None
|
|
keyttl 7200
|
|
|
|
constructed policy example.org:
|
|
inherits None
|
|
directory "keydir"
|
|
algorithm RSASHA1
|
|
coverage 31536000
|
|
ksk_keysize 2048
|
|
zsk_keysize 1024
|
|
ksk_rollperiod None
|
|
zsk_rollperiod 15552000
|
|
ksk_prepublish None
|
|
ksk_postpublish None
|
|
zsk_prepublish 3628800
|
|
zsk_postpublish 3628800
|
|
ksk_standby None
|
|
zsk_standby None
|
|
keyttl 3600
|
|
|
|
constructed policy example.net:
|
|
inherits None
|
|
directory "keydir"
|
|
algorithm RSASHA1
|
|
coverage 31536000
|
|
ksk_keysize 2048
|
|
zsk_keysize 1024
|
|
ksk_rollperiod None
|
|
zsk_rollperiod 15552000
|
|
ksk_prepublish None
|
|
ksk_postpublish None
|
|
zsk_prepublish 3628800
|
|
zsk_postpublish 3628800
|
|
ksk_standby None
|
|
zsk_standby None
|
|
keyttl 3600
|
|
|
|
algorithm policy RSASHA1:
|
|
inherits None
|
|
directory None
|
|
algorithm None
|
|
coverage None
|
|
ksk_keysize 2048
|
|
zsk_keysize 1024
|
|
ksk_rollperiod None
|
|
zsk_rollperiod None
|
|
ksk_prepublish None
|
|
ksk_postpublish None
|
|
zsk_prepublish None
|
|
zsk_postpublish None
|
|
ksk_standby None
|
|
zsk_standby None
|
|
keyttl None
|
|
|
|
algorithm policy DSA:
|
|
inherits None
|
|
directory None
|
|
algorithm DSA
|
|
coverage None
|
|
ksk_keysize 1024
|
|
zsk_keysize 2048
|
|
ksk_rollperiod None
|
|
zsk_rollperiod None
|
|
ksk_prepublish None
|
|
ksk_postpublish None
|
|
zsk_prepublish None
|
|
zsk_postpublish None
|
|
ksk_standby None
|
|
zsk_standby None
|
|
keyttl None
|
|
|
|
policy extra:
|
|
inherits default
|
|
directory None
|
|
algorithm None
|
|
coverage 157680000
|
|
ksk_keysize None
|
|
zsk_keysize None
|
|
ksk_rollperiod 31536000
|
|
zsk_rollperiod 7776000
|
|
ksk_prepublish 7776000
|
|
ksk_postpublish None
|
|
zsk_prepublish None
|
|
zsk_postpublish 604800
|
|
ksk_standby None
|
|
zsk_standby None
|
|
keyttl 7200
|
|
|