03-postpublish.pol revision 0c27b3fe77ac1d5094ba3521e8142d9e7973133f
fefb8b844b6286bfc41bb2e0c4cc003b8e7d4ff2kess/*
fefb8b844b6286bfc41bb2e0c4cc003b8e7d4ff2kess * Copyright (C) 2016 Internet Systems Consortium, Inc. ("ISC")
fefb8b844b6286bfc41bb2e0c4cc003b8e7d4ff2kess *
5f5d1b4cc970b7f06ff8ef6526128e9a27303d88nd * This Source Code Form is subject to the terms of the Mozilla Public
fefb8b844b6286bfc41bb2e0c4cc003b8e7d4ff2kess * License, v. 2.0. If a copy of the MPL was not distributed with this
a3d2b657dd7ca66251b562b6a82c2335135b9172nd * file, You can obtain one at http://mozilla.org/MPL/2.0/.
6fbd2e53c97ea6976d93e0ac521adabc55e0fb73nd */
a3d2b657dd7ca66251b562b6a82c2335135b9172nd
a3d2b657dd7ca66251b562b6a82c2335135b9172ndpolicy postpublish_rsa {
a3d2b657dd7ca66251b562b6a82c2335135b9172nd algorithm rsasha1;
a3d2b657dd7ca66251b562b6a82c2335135b9172nd coverage 1y;
a3d2b657dd7ca66251b562b6a82c2335135b9172nd roll-period zsk 3mo;
a3d2b657dd7ca66251b562b6a82c2335135b9172nd pre-publish zsk 2w;
a3d2b657dd7ca66251b562b6a82c2335135b9172nd post-publish zsk 2w;
a3d2b657dd7ca66251b562b6a82c2335135b9172nd roll-period ksk 1y;
a3d2b657dd7ca66251b562b6a82c2335135b9172nd pre-publish ksk 1mo;
a3d2b657dd7ca66251b562b6a82c2335135b9172nd post-publish ksk 2mo;
a3d2b657dd7ca66251b562b6a82c2335135b9172nd keyttl 1h;
a3d2b657dd7ca66251b562b6a82c2335135b9172nd key-size ksk 2048;
a3d2b657dd7ca66251b562b6a82c2335135b9172nd key-size zsk 1024;
a3d2b657dd7ca66251b562b6a82c2335135b9172nd};
7db9f691a00ead175b03335457ca296a33ddf31bnd
84ef01e0cc5691422370a55f218f43f425d99a9cslive// Policy that defines a post-publish period lower than the rollover period
fefb8b844b6286bfc41bb2e0c4cc003b8e7d4ff2kesszone good_postpublish.test {
fefb8b844b6286bfc41bb2e0c4cc003b8e7d4ff2kess policy postpublish_rsa;
fefb8b844b6286bfc41bb2e0c4cc003b8e7d4ff2kess coverage 6mo;
fefb8b844b6286bfc41bb2e0c4cc003b8e7d4ff2kess roll-period ksk 4mo;
fefb8b844b6286bfc41bb2e0c4cc003b8e7d4ff2kess pre-publish ksk 1mo;
fefb8b844b6286bfc41bb2e0c4cc003b8e7d4ff2kess};
fefb8b844b6286bfc41bb2e0c4cc003b8e7d4ff2kess
fefb8b844b6286bfc41bb2e0c4cc003b8e7d4ff2kess// Policy that defines a post-publish period equal to the rollover period
fefb8b844b6286bfc41bb2e0c4cc003b8e7d4ff2kesszone bad_postpublish.test {
fefb8b844b6286bfc41bb2e0c4cc003b8e7d4ff2kess policy postpublish_rsa;
fefb8b844b6286bfc41bb2e0c4cc003b8e7d4ff2kess coverage 6mo;
fefb8b844b6286bfc41bb2e0c4cc003b8e7d4ff2kess roll-period ksk 4mo;
fefb8b844b6286bfc41bb2e0c4cc003b8e7d4ff2kess pre-publish ksk 4mo;
fefb8b844b6286bfc41bb2e0c4cc003b8e7d4ff2kess};
fefb8b844b6286bfc41bb2e0c4cc003b8e7d4ff2kess
fefb8b844b6286bfc41bb2e0c4cc003b8e7d4ff2kess
fefb8b844b6286bfc41bb2e0c4cc003b8e7d4ff2kess