58 lines
1.4 KiB
Plaintext
58 lines
1.4 KiB
Plaintext
/*
|
|
* Copyright (C) 2016 Internet Systems Consortium, Inc. ("ISC")
|
|
*
|
|
* Permission to use, copy, modify, and/or distribute this software for any
|
|
* purpose with or without fee is hereby granted, provided that the above
|
|
* copyright notice and this permission notice appear in all copies.
|
|
*
|
|
* THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
|
|
* REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
|
|
* AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
|
|
* INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
|
|
* LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
|
|
* OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
|
|
* PERFORMANCE OF THIS SOFTWARE.
|
|
*/
|
|
|
|
policy keysize_rsa {
|
|
algorithm rsasha1;
|
|
coverage 1y;
|
|
roll-period zsk 3mo;
|
|
pre-publish zsk 2w;
|
|
post-publish zsk 2w;
|
|
roll-period ksk 1y;
|
|
pre-publish ksk 1mo;
|
|
post-publish ksk 2mo;
|
|
keyttl 1h;
|
|
key-size ksk 2048;
|
|
key-size zsk 1024;
|
|
};
|
|
|
|
policy keysize_dsa {
|
|
algorithm dsa;
|
|
coverage 1y;
|
|
key-size ksk 2048;
|
|
key-size zsk 1024;
|
|
};
|
|
|
|
zone good_rsa.test {
|
|
policy keysize_rsa;
|
|
};
|
|
|
|
zone bad_rsa.test {
|
|
policy keysize_rsa;
|
|
key-size ksk 511;
|
|
};
|
|
|
|
zone good_dsa.test {
|
|
policy keysize_dsa;
|
|
key-size ksk 1024;
|
|
key-size zsk 768;
|
|
};
|
|
|
|
zone bad_dsa.test {
|
|
policy keysize_dsa;
|
|
key-size ksk 1024;
|
|
key-size zsk 769;
|
|
};
|