91a686c031
Use the testcrypto script to see if these algorithms are supported by
openssl. If so, add the specific configuration to the named.conf file
and touch a file to indicate support. If the file exists, the
corresponding setup and tests are performed.
(cherry picked from commit 7be1835795)
16 lines
376 B
Plaintext
16 lines
376 B
Plaintext
dnssec-policy "ed448" {
|
|
dnskey-ttl 1234;
|
|
|
|
keys {
|
|
ksk key-directory lifetime P10Y algorithm 16;
|
|
zsk key-directory lifetime P5Y algorithm 16;
|
|
zsk key-directory lifetime P1Y algorithm 16 456;
|
|
};
|
|
};
|
|
|
|
zone "ed448.kasp" {
|
|
type primary;
|
|
file "ed448.kasp.db";
|
|
dnssec-policy "ed448";
|
|
};
|