4892006a92
With the introduction of 'checkds', the 'parent-registration-delay'
option becomes obsolete.
(cherry picked from commit a25f49f153)
17 lines
500 B
ReStructuredText
17 lines
500 B
ReStructuredText
::
|
|
|
|
dnssec-policy <string> {
|
|
dnskey-ttl <duration>;
|
|
keys { ( csk | ksk | zsk ) [ ( key-directory ) ] lifetime
|
|
<duration_or_unlimited> algorithm <string> [ <integer> ]; ... };
|
|
max-zone-ttl <duration>;
|
|
parent-ds-ttl <duration>;
|
|
parent-propagation-delay <duration>;
|
|
publish-safety <duration>;
|
|
retire-safety <duration>;
|
|
signatures-refresh <duration>;
|
|
signatures-validity <duration>;
|
|
signatures-validity-dnskey <duration>;
|
|
zone-propagation-delay <duration>;
|
|
};
|