diff options
Diffstat (limited to 'contrib/kasp/kasp.xml')
| -rw-r--r-- | contrib/kasp/kasp.xml | 146 |
1 files changed, 146 insertions, 0 deletions
diff --git a/contrib/kasp/kasp.xml b/contrib/kasp/kasp.xml new file mode 100644 index 0000000..a92d096 --- /dev/null +++ b/contrib/kasp/kasp.xml @@ -0,0 +1,146 @@ +<?xml version="1.0" encoding="UTF-8"?> +<!-- +Copyright (C) Internet Systems Consortium, Inc. ("ISC") + +SPDX-License-Identifier: MPL-2.0 + +This Source Code Form is subject to the terms of the Mozilla Public +License, v. 2.0. If a copy of the MPL was not distributed with this +file, you can obtain one at https://mozilla.org/MPL/2.0/. + +See the COPYRIGHT file distributed with this work for additional +information regarding copyright ownership. +--> + +<!-- Sample KASP file to use for testing kasp2policy.py. --> +<KASP> + <Policy name="Policy1"> + <Description>A default policy that will + amaze you and your friends</Description> + <Signatures> + <Resign>PT5M</Resign> + <Refresh>PT5M</Refresh> + <Validity> + <Default>PT15M</Default> + <Denial>PT15M</Denial> + </Validity> + <Jitter>PT2M</Jitter> + <InceptionOffset>PT1M</InceptionOffset> + </Signatures> + + <Denial> + <NSEC> + </NSEC> + </Denial> + + <Keys> + <!-- Parameters for both KSK and ZSK --> + <TTL>PT1M</TTL> + <RetireSafety>PT0S</RetireSafety> + <PublishSafety>PT0S</PublishSafety> + + <!-- Parameters for KSK only --> + <KSK> + <Algorithm length="2048">5</Algorithm> + <Lifetime>PT40M</Lifetime> + <Repository>softHSM</Repository> + <Standby>1</Standby> + </KSK> + + <!-- Parameters for ZSK only --> + <ZSK> + <Algorithm length="2048">5</Algorithm> + <Lifetime>PT25M</Lifetime> + <Repository>softHSM</Repository> + <Standby>1</Standby> + </ZSK> + </Keys> + + <Zone> + <PropagationDelay>PT0S</PropagationDelay> + <SOA> + <TTL>PT0S</TTL> + <Minimum>PT0S</Minimum> + <Serial>unixtime</Serial> + </SOA> + </Zone> + + <Parent> + <PropagationDelay>PT8M</PropagationDelay> + <DS> + <TTL>PT0S</TTL> + </DS> + <SOA> + <TTL>PT0S</TTL> + <Minimum>PT0S</Minimum> + </SOA> + </Parent> + </Policy> + <Policy name="Policy2"> + <Description>A default policy that will amaze you and your friends</Description> + <Signatures> + <Resign>PT7M</Resign> + <Refresh>PT7M</Refresh> + <Validity> + <Default>PT15M</Default> + <Denial>PT16M</Denial> + </Validity> + <Jitter>PT2M</Jitter> + <InceptionOffset>PT1M</InceptionOffset> + </Signatures> + + <Denial> + <NSEC3> + <Resalt>P120D</Resalt> + <Hash> + <Algorithm>1</Algorithm> + <Iterations>5</Iterations> + <Salt length="8"/> + </Hash> + </NSEC3> + </Denial> + + <Keys> + <!-- Parameters for both KSK and ZSK --> + <TTL>PT15M</TTL> + <RetireSafety>PT0S</RetireSafety> + <PublishSafety>PT0S</PublishSafety> + + <!-- Parameters for KSK only --> + <KSK> + <Algorithm length="2048">7</Algorithm> + <Lifetime>PT45M</Lifetime> + <Repository>softHSM</Repository> + <Standby>1</Standby> + </KSK> + + <!-- Parameters for ZSK only --> + <ZSK> + <Algorithm length="2048">7</Algorithm> + <Lifetime>PT25M</Lifetime> + <Repository>softHSM</Repository> + <Standby>1</Standby> + </ZSK> + </Keys> + + <Zone> + <PropagationDelay>PT0S</PropagationDelay> + <SOA> + <TTL>PT0S</TTL> + <Minimum>PT0S</Minimum> + <Serial>unixtime</Serial> + </SOA> + </Zone> + + <Parent> + <PropagationDelay>PT12M</PropagationDelay> + <DS> + <TTL>PT0S</TTL> + </DS> + <SOA> + <TTL>PT0S</TTL> + <Minimum>PT0S</Minimum> + </SOA> + </Parent> + </Policy> +</KASP> |