summaryrefslogtreecommitdiffstats
path: root/doc/misc/dnssec-policy.grammar.rst
blob: b0b9692fcba7452b8d5647b57606b3e5fe74267e (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
.. Copyright (C) Internet Systems Consortium, Inc. ("ISC")
..
.. SPDX-License-Identifier: MPL-2.0
..
.. This Source Code Form is subject to the terms of the Mozilla Public
.. License, v. 2.0.  If a copy of the MPL was not distributed with this
.. file, you can obtain one at https://mozilla.org/MPL/2.0/.
..
.. See the COPYRIGHT file distributed with this work for additional
.. information regarding copyright ownership.

  dnssec-policy <string> {
  	dnskey-ttl <duration>;
  	keys { ( csk | ksk | zsk ) [ ( key-directory ) ] lifetime
  	    <duration_or_unlimited> algorithm <string> [ <integer> ]; ... };
  	max-zone-ttl <duration>;
  	nsec3param [ iterations <integer> ] [ optout <boolean> ] [
  	    salt-length <integer> ];
  	parent-ds-ttl <duration>;
  	parent-propagation-delay <duration>;
  	publish-safety <duration>;
  	purge-keys <duration>;
  	retire-safety <duration>;
  	signatures-refresh <duration>;
  	signatures-validity <duration>;
  	signatures-validity-dnskey <duration>;
  	zone-propagation-delay <duration>;
  };