Allow for key lifetime unlimited

The keyword 'unlimited' can be used instead of PT0S which means the
same but is more comprehensible for users.

Also fix some redundant "none" parameters in the kasp test.
This commit is contained in:
Matthijs Mekking
2020-02-06 15:41:47 +01:00
committed by Evan Hunt
parent 9dc630016e
commit 2733edb2a6
17 changed files with 194 additions and 63 deletions

View File

@@ -43,7 +43,8 @@ U="UNRETENTIVE"
# Set up zones that will be initially signed.
#
for zn in default rsasha1 dnssec-keygen some-keys legacy-keys pregenerated \
rumoured rsasha1-nsec3 rsasha256 rsasha512 ecdsa256 ecdsa384 inherit
rumoured rsasha1-nsec3 rsasha256 rsasha512 ecdsa256 ecdsa384 \
inherit unlimited
do
setup "${zn}.kasp"
cp template.db.in "$zonefile"