a27dc50157eb8267becffcd800eb1abf7e16ae7cEvan Hunt/*
a27dc50157eb8267becffcd800eb1abf7e16ae7cEvan Hunt * Copyright (C) 2016 Internet Systems Consortium, Inc. ("ISC")
a27dc50157eb8267becffcd800eb1abf7e16ae7cEvan Hunt *
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews * This Source Code Form is subject to the terms of the Mozilla Public
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews * License, v. 2.0. If a copy of the MPL was not distributed with this
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews * file, You can obtain one at http://mozilla.org/MPL/2.0/.
a27dc50157eb8267becffcd800eb1abf7e16ae7cEvan Hunt */
a27dc50157eb8267becffcd800eb1abf7e16ae7cEvan Hunt
f6096b958c8b58c4709860d7c4dcdde5deeacb7aEvan Huntpolicy combined_pre_post_rsa {
a27dc50157eb8267becffcd800eb1abf7e16ae7cEvan Hunt algorithm rsasha1;
a27dc50157eb8267becffcd800eb1abf7e16ae7cEvan Hunt coverage 1y;
a27dc50157eb8267becffcd800eb1abf7e16ae7cEvan Hunt roll-period zsk 3mo;
a27dc50157eb8267becffcd800eb1abf7e16ae7cEvan Hunt pre-publish zsk 2w;
a27dc50157eb8267becffcd800eb1abf7e16ae7cEvan Hunt post-publish zsk 2w;
a27dc50157eb8267becffcd800eb1abf7e16ae7cEvan Hunt roll-period ksk 1y;
a27dc50157eb8267becffcd800eb1abf7e16ae7cEvan Hunt pre-publish ksk 1mo;
a27dc50157eb8267becffcd800eb1abf7e16ae7cEvan Hunt post-publish ksk 2mo;
a27dc50157eb8267becffcd800eb1abf7e16ae7cEvan Hunt keyttl 1h;
a27dc50157eb8267becffcd800eb1abf7e16ae7cEvan Hunt key-size ksk 2048;
a27dc50157eb8267becffcd800eb1abf7e16ae7cEvan Hunt key-size zsk 1024;
f6096b958c8b58c4709860d7c4dcdde5deeacb7aEvan Hunt};
f6096b958c8b58c4709860d7c4dcdde5deeacb7aEvan Hunt
f6096b958c8b58c4709860d7c4dcdde5deeacb7aEvan Hunt// Policy that defines a combined pre-publish and post-publish period lower
f6096b958c8b58c4709860d7c4dcdde5deeacb7aEvan Hunt// than the rollover period
f6096b958c8b58c4709860d7c4dcdde5deeacb7aEvan Huntzone good_combined_pre_post_ksk.test {
a27dc50157eb8267becffcd800eb1abf7e16ae7cEvan Hunt policy combined_pre_post_rsa;
a27dc50157eb8267becffcd800eb1abf7e16ae7cEvan Hunt coverage 6mo;
a27dc50157eb8267becffcd800eb1abf7e16ae7cEvan Hunt roll-period ksk 4mo;
a27dc50157eb8267becffcd800eb1abf7e16ae7cEvan Hunt pre-publish ksk 1mo;
a27dc50157eb8267becffcd800eb1abf7e16ae7cEvan Hunt post-publish ksk 1mo;
f6096b958c8b58c4709860d7c4dcdde5deeacb7aEvan Hunt};
f6096b958c8b58c4709860d7c4dcdde5deeacb7aEvan Hunt
f6096b958c8b58c4709860d7c4dcdde5deeacb7aEvan Hunt// Policy that defines a combined pre-publish and post-publish period higher
f6096b958c8b58c4709860d7c4dcdde5deeacb7aEvan Hunt// than the rollover period
f6096b958c8b58c4709860d7c4dcdde5deeacb7aEvan Huntzone bad_combined_pre_post_ksk.test {
a27dc50157eb8267becffcd800eb1abf7e16ae7cEvan Hunt policy combined_pre_post_rsa;
a27dc50157eb8267becffcd800eb1abf7e16ae7cEvan Hunt coverage 6mo;
a27dc50157eb8267becffcd800eb1abf7e16ae7cEvan Hunt roll-period ksk 4mo;
a27dc50157eb8267becffcd800eb1abf7e16ae7cEvan Hunt pre-publish ksk 2mo;
a27dc50157eb8267becffcd800eb1abf7e16ae7cEvan Hunt post-publish ksk 2mo;
f6096b958c8b58c4709860d7c4dcdde5deeacb7aEvan Hunt};
f6096b958c8b58c4709860d7c4dcdde5deeacb7aEvan Hunt
f6096b958c8b58c4709860d7c4dcdde5deeacb7aEvan Hunt// Policy that defines a combined pre-publish and post-publish period lower
f6096b958c8b58c4709860d7c4dcdde5deeacb7aEvan Hunt// than the rollover period
f6096b958c8b58c4709860d7c4dcdde5deeacb7aEvan Huntzone good_combined_pre_post_zsk.test {
a27dc50157eb8267becffcd800eb1abf7e16ae7cEvan Hunt policy combined_pre_post_rsa;
a27dc50157eb8267becffcd800eb1abf7e16ae7cEvan Hunt coverage 1y;
a27dc50157eb8267becffcd800eb1abf7e16ae7cEvan Hunt roll-period zsk 3mo;
a27dc50157eb8267becffcd800eb1abf7e16ae7cEvan Hunt pre-publish zsk 1mo;
a27dc50157eb8267becffcd800eb1abf7e16ae7cEvan Hunt post-publish zsk 1mo;
f6096b958c8b58c4709860d7c4dcdde5deeacb7aEvan Hunt};
f6096b958c8b58c4709860d7c4dcdde5deeacb7aEvan Hunt
f6096b958c8b58c4709860d7c4dcdde5deeacb7aEvan Hunt// Policy that defines a combined pre-publish and post-publish period higher
f6096b958c8b58c4709860d7c4dcdde5deeacb7aEvan Hunt// than the rollover period
f6096b958c8b58c4709860d7c4dcdde5deeacb7aEvan Huntzone bad_combined_pre_post_zsk.test {
a27dc50157eb8267becffcd800eb1abf7e16ae7cEvan Hunt policy combined_pre_post_rsa;
a27dc50157eb8267becffcd800eb1abf7e16ae7cEvan Hunt coverage 1y;
a27dc50157eb8267becffcd800eb1abf7e16ae7cEvan Hunt roll-period zsk 3mo;
a27dc50157eb8267becffcd800eb1abf7e16ae7cEvan Hunt pre-publish zsk 2mo;
a27dc50157eb8267becffcd800eb1abf7e16ae7cEvan Hunt post-publish zsk 2mo;
f6096b958c8b58c4709860d7c4dcdde5deeacb7aEvan Hunt};
f6096b958c8b58c4709860d7c4dcdde5deeacb7aEvan Hunt
f6096b958c8b58c4709860d7c4dcdde5deeacb7aEvan Hunt