d907426f0f
4417. [bug] dnssec-keymgr could fail to create successor keys if the prepublication interval was set to a value smaller than the default. [RT #42820] Patch submitted by Nis Wechselberg (enbewe@enbewe.de).
16 lines
398 B
Plaintext
16 lines
398 B
Plaintext
/*
|
|
* Copyright (C) 2016 Internet Systems Consortium, Inc. ("ISC")
|
|
*
|
|
* This Source Code Form is subject to the terms of the Mozilla Public
|
|
* License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
* file, You can obtain one at http://mozilla.org/MPL/2.0/.
|
|
*/
|
|
|
|
policy default {
|
|
policy global;
|
|
algorithm nsec3rsasha1;
|
|
pre-publish zsk 2w;
|
|
roll-period zsk 6mo;
|
|
coverage 364d;
|
|
};
|