summaryrefslogtreecommitdiffstats
path: root/bin/tests/system/keymgr/policy.good
blob: eb23246214fc83e69bed230ee3ada288815727e0 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
policy default:
	inherits global
	directory None
	algorithm None
	coverage None
	ksk_keysize None
	zsk_keysize None
	ksk_rollperiod None
	zsk_rollperiod None
	ksk_prepublish None
	ksk_postpublish None
	zsk_prepublish None
	zsk_postpublish None
	ksk_standby None
	zsk_standby None
	keyttl None

policy global:
	inherits None
	directory None
	algorithm RSASHA256
	coverage 15552000
	ksk_keysize 2048
	zsk_keysize 2048
	ksk_rollperiod None
	zsk_rollperiod 31536000
	ksk_prepublish 2592000
	ksk_postpublish 2592000
	zsk_prepublish 2592000
	zsk_postpublish 2592000
	ksk_standby None
	zsk_standby None
	keyttl 3600

constructed policy example.com:
	inherits global
	directory None
	algorithm RSASHA256
	coverage 15552000
	ksk_keysize 2048
	zsk_keysize 2048
	ksk_rollperiod None
	zsk_rollperiod 31536000
	ksk_prepublish 2592000
	ksk_postpublish 2592000
	zsk_prepublish 2592000
	zsk_postpublish 2592000
	ksk_standby None
	zsk_standby None
	keyttl 3600

policy default:
	inherits None
	directory "keydir"
	algorithm RSASHA1
	coverage 31536000
	ksk_keysize None
	zsk_keysize None
	ksk_rollperiod None
	zsk_rollperiod 15552000
	ksk_prepublish None
	ksk_postpublish None
	zsk_prepublish 3628800
	zsk_postpublish 3628800
	ksk_standby None
	zsk_standby None
	keyttl 3600

zone policy example.com:
	inherits extra
	directory "keydir"
	algorithm NSEC3RSASHA1
	coverage 12960000
	ksk_keysize 2048
	zsk_keysize 2048
	ksk_rollperiod 31536000
	zsk_rollperiod 7776000
	ksk_prepublish 7776000
	ksk_postpublish None
	zsk_prepublish 3628800
	zsk_postpublish 604800
	ksk_standby None
	zsk_standby None
	keyttl 7200

constructed policy example.org:
	inherits None
	directory "keydir"
	algorithm RSASHA1
	coverage 31536000
	ksk_keysize 2048
	zsk_keysize 1024
	ksk_rollperiod None
	zsk_rollperiod 15552000
	ksk_prepublish None
	ksk_postpublish None
	zsk_prepublish 3628800
	zsk_postpublish 3628800
	ksk_standby None
	zsk_standby None
	keyttl 3600

constructed policy example.net:
	inherits None
	directory "keydir"
	algorithm RSASHA1
	coverage 31536000
	ksk_keysize 2048
	zsk_keysize 1024
	ksk_rollperiod None
	zsk_rollperiod 15552000
	ksk_prepublish None
	ksk_postpublish None
	zsk_prepublish 3628800
	zsk_postpublish 3628800
	ksk_standby None
	zsk_standby None
	keyttl 3600

algorithm policy RSASHA1:
	inherits None
	directory None
	algorithm None
	coverage None
	ksk_keysize 2048
	zsk_keysize 1024
	ksk_rollperiod None
	zsk_rollperiod None
	ksk_prepublish None
	ksk_postpublish None
	zsk_prepublish None
	zsk_postpublish None
	ksk_standby None
	zsk_standby None
	keyttl None

algorithm policy RSASHA256:
	inherits None
	directory None
	algorithm RSASHA256
	coverage None
	ksk_keysize 2048
	zsk_keysize 2048
	ksk_rollperiod None
	zsk_rollperiod None
	ksk_prepublish None
	ksk_postpublish None
	zsk_prepublish None
	zsk_postpublish None
	ksk_standby None
	zsk_standby None
	keyttl None

algorithm policy ECDSAP256SHA256:
	inherits None
	directory None
	algorithm ECDSAP256SHA256
	coverage None
	ksk_keysize None
	zsk_keysize None
	ksk_rollperiod None
	zsk_rollperiod None
	ksk_prepublish None
	ksk_postpublish None
	zsk_prepublish None
	zsk_postpublish None
	ksk_standby None
	zsk_standby None
	keyttl None

policy extra:
	inherits default
	directory None
	algorithm None
	coverage 157680000
	ksk_keysize None
	zsk_keysize None
	ksk_rollperiod 31536000
	zsk_rollperiod 7776000
	ksk_prepublish 7776000
	ksk_postpublish None
	zsk_prepublish None
	zsk_postpublish 604800
	ksk_standby None
	zsk_standby None
	keyttl 7200