Page MenuHomeGRNET

seeds_policies.rb
No OneTemporary

File Metadata

Created
Sat, Jun 7, 7:04 PM

seeds_policies.rb

policies = {}
policies[:default] = <<-POLICY
<?xml version="1.0"?>
<KASP>
<Policy name="default">
<Description>A default policy that will amaze you and your friends</Description>
<Signatures>
<Resign>PT7200S</Resign>
<Refresh>PT259200S</Refresh>
<Validity>
<Default>PT1209600S</Default>
<Denial>PT1209600S</Denial>
</Validity>
<Jitter>PT43200S</Jitter>
<InceptionOffset>PT3600S</InceptionOffset>
</Signatures>
<Denial>
<NSEC3>
<Resalt>PT8640000S</Resalt>
<Hash>
<Algorithm>1</Algorithm>
<Iterations>5</Iterations>
<Salt length="8"/>
</Hash>
</NSEC3>
</Denial>
<Keys>
<TTL>PT3600S</TTL>
<RetireSafety>PT3600S</RetireSafety>
<PublishSafety>PT3600S</PublishSafety>
<Purge>PT1209600S</Purge>
<KSK>
<Algorithm length="2048">8</Algorithm>
<Lifetime>PT31536000S</Lifetime>
<Repository>SoftHSM</Repository>
<Standby>0</Standby>
</KSK>
<ZSK>
<Algorithm length="1024">8</Algorithm>
<Lifetime>PT7776000S</Lifetime>
<Repository>SoftHSM</Repository>
<Standby>0</Standby>
</ZSK>
</Keys>
<Zone>
<PropagationDelay>PT43200S</PropagationDelay>
<SOA>
<TTL>PT3600S</TTL>
<Minimum>PT3600S</Minimum>
<Serial>unixtime</Serial>
</SOA>
</Zone>
<Parent>
<PropagationDelay>PT9999S</PropagationDelay>
<DS>
<TTL>PT3600S</TTL>
</DS>
<SOA>
<TTL>PT172800S</TTL>
<Minimum>PT10800S</Minimum>
</SOA>
</Parent>
</Policy>
</KASP>
POLICY
policies[:lab] = <<-POLICY
<?xml version="1.0"?>
<KASP>
<Policy name="lab">
<Description>Quick turnaround policy for lab work</Description>
<Signatures>
<Resign>PT600S</Resign>
<Refresh>PT1800S</Refresh>
<Validity>
<Default>PT3600S</Default>
<Denial>PT3600S</Denial>
</Validity>
<Jitter>PT60S</Jitter>
<InceptionOffset>PT3600S</InceptionOffset>
</Signatures>
<Denial>
<NSEC3>
<Resalt>PT8640000S</Resalt>
<Hash>
<Algorithm>1</Algorithm>
<Iterations>5</Iterations>
<Salt length="8"/>
</Hash>
</NSEC3>
</Denial>
<Keys>
<TTL>PT300S</TTL>
<RetireSafety>PT360S</RetireSafety>
<PublishSafety>PT360S</PublishSafety>
<Purge>PT432000S</Purge>
<KSK>
<Algorithm length="2048">8</Algorithm>
<Lifetime>PT31536000S</Lifetime>
<Repository>SoftHSM</Repository>
<Standby>0</Standby>
</KSK>
<ZSK>
<Algorithm length="1024">8</Algorithm>
<Lifetime>PT14400S</Lifetime>
<Repository>SoftHSM</Repository>
<Standby>0</Standby>
</ZSK>
</Keys>
<Zone>
<PropagationDelay>PT30S</PropagationDelay>
<SOA>
<TTL>PT300S</TTL>
<Minimum>PT300S</Minimum>
<Serial>counter</Serial>
</SOA>
</Zone>
<Parent>
<PropagationDelay>PT9999S</PropagationDelay>
<DS>
<TTL>PT3600S</TTL>
</DS>
<SOA>
<TTL>PT172800S</TTL>
<Minimum>PT10800S</Minimum>
</SOA>
</Parent>
</Policy>
</KASP>
POLICY
policies.each_pair { |name, policy|
DnssecPolicy.create(name: name, policy: policy)
}

Event Timeline