dnssec_policy.yml
No OneTemporary
Actions

Subscribers

None

File Metadata

	default:
	name: default
	policy: >
	<<-POLICY
	<?xml version="1.0"?>
	<KASP>
	<Policy name="default">
	<Description>A default policy that will amaze you and your friends</Description>
	<Signatures>
	<Resign>PT7200S</Resign>
	<Refresh>PT259200S</Refresh>
	<Validity>
	<Default>PT1209600S</Default>
	<Denial>PT1209600S</Denial>
	</Validity>
	<Jitter>PT43200S</Jitter>
	<InceptionOffset>PT3600S</InceptionOffset>
	</Signatures>
	<Denial>
	<NSEC3>
	<Resalt>PT8640000S</Resalt>
	<Hash>
	<Algorithm>1</Algorithm>
	<Iterations>5</Iterations>
	<Salt length="8"/>
	</Hash>
	</NSEC3>
	</Denial>
	<Keys>
	<TTL>PT3600S</TTL>
	<RetireSafety>PT3600S</RetireSafety>
	<PublishSafety>PT3600S</PublishSafety>
	<Purge>PT1209600S</Purge>
	<KSK>
	<Algorithm length="2048">8</Algorithm>
	<Lifetime>PT31536000S</Lifetime>
	<Repository>SoftHSM</Repository>
	<Standby>0</Standby>
	</KSK>
	<ZSK>
	<Algorithm length="1024">8</Algorithm>
	<Lifetime>PT7776000S</Lifetime>
	<Repository>SoftHSM</Repository>
	<Standby>0</Standby>
	</ZSK>
	</Keys>
	<Zone>
	<PropagationDelay>PT43200S</PropagationDelay>
	<SOA>
	<TTL>PT3600S</TTL>
	<Minimum>PT3600S</Minimum>
	<Serial>unixtime</Serial>
	</SOA>
	</Zone>
	<Parent>
	<PropagationDelay>PT9999S</PropagationDelay>
	<DS>
	<TTL>PT3600S</TTL>
	</DS>
	<SOA>
	<TTL>PT172800S</TTL>
	<Minimum>PT10800S</Minimum>
	</SOA>
	</Parent>
	</Policy>
	</KASP>
	POLICY