diff --git a/bin/tests/system/kasp/ns6/named.conf.in b/bin/tests/system/kasp/ns6/named.conf.in index 7b0cba8478..8215531f3e 100644 --- a/bin/tests/system/kasp/ns6/named.conf.in +++ b/bin/tests/system/kasp/ns6/named.conf.in @@ -89,12 +89,6 @@ zone "step1.csk-algorithm-roll.kasp" { dnssec-policy "csk-algoroll"; }; -dnssec-policy "modified" { - keys { - csk lifetime unlimited algorithm rsasha256 2048; - }; -}; - zone example { type primary; file "example.db"; diff --git a/bin/tests/system/kasp/ns6/named2.conf.in b/bin/tests/system/kasp/ns6/named2.conf.in index 087fa7716f..cd209e7a52 100644 --- a/bin/tests/system/kasp/ns6/named2.conf.in +++ b/bin/tests/system/kasp/ns6/named2.conf.in @@ -177,12 +177,6 @@ zone "step6.csk-algorithm-roll.kasp" { dnssec-policy "csk-algoroll"; }; -dnssec-policy "modified" { - keys { - csk lifetime unlimited algorithm rsasha256 2048; - }; -}; - zone example { type primary; file "example.db"; diff --git a/bin/tests/system/kasp/ns6/policies/kasp-fips.conf.in b/bin/tests/system/kasp/ns6/policies/kasp-fips.conf.in index 810b91d6ad..dc234d0c21 100644 --- a/bin/tests/system/kasp/ns6/policies/kasp-fips.conf.in +++ b/bin/tests/system/kasp/ns6/policies/kasp-fips.conf.in @@ -24,6 +24,12 @@ dnssec-policy "nsec3" { nsec3param iterations 0 optout no salt-length 0; }; +dnssec-policy "modified" { + keys { + csk lifetime unlimited algorithm rsasha256 2048; + }; +}; + dnssec-policy "rsasha256" { signatures-refresh P5D; signatures-validity 30d;