250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas GustafssonCopyright (C) 2000 Internet Software Consortium.

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas GustafssonSee COPYRIGHT in the source root or http://isc.org/copyright.html for terms.

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson$Id: options,v 1.42 2000/11/14 18:10:59 gson Exp $

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas GustafssonThis is a summary of the implementation status of the various named.conf

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafssonoptions in BIND 9.

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas GustafssonLegend:

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson Yes Implemented in this release.

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson No Not implemented, may be implemented in a later release.

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson Obsolete Obsolete, not applicable to BIND 9, or just evil.

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson Will not be implemented.

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson * New in BIND 9.

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson + The option is now always enabled.

dbeb32261081835bb9ba44db68df5dfed0fda411Andreas Gustafsson

dbeb32261081835bb9ba44db68df5dfed0fda411Andreas Gustafsson - The option is now always disabled.

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson % The default value has changed since BIND 8.

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson @ Semantics of certain pathological address match lists, in

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson particular those involving double negation, have changed.

dbeb32261081835bb9ba44db68df5dfed0fda411Andreas Gustafsson The new semantics are generally safer. IPv6 addresses

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson are supported, but the predefined ACLs "localhost" and

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson "localnets" match IPv4 addresses only.

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson # BIND 9 accepts both LF and CRLF as end-of-line markers.

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafssonoptions {

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ version version_string; ] Yes

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ directory path_name; ] Yes

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ named-xfer path_name; ] Obsolete

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ dump-file path_name; ] No

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ memstatistics-file path_name; ] No

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ pid-file path_name; ] Yes

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ statistics-file path_name; ] No

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ auth-nxdomain yes_or_no; ] Yes%

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ deallocate-on-exit yes_or_no; ] Obsolete+

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ dialup yes_or_no; ] Yes

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ fake-iquery yes_or_no; ] Obsolete-

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ fetch-glue yes_or_no; ] Obsolete

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ has-old-clients yes_or_no; ] Obsolete

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ host-statistics yes_or_no; ] No

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ multiple-cnames yes_or_no; ] Obsolete-

dbeb32261081835bb9ba44db68df5dfed0fda411Andreas Gustafsson [ notify yes_or_no; ] Yes

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ recursion yes_or_no; ] Yes

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ rfc2308-type1 yes_or_no; ] No

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ use-id-pool yes_or_no; ] Obsolete+

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ treat-cr-as-space yes_or_no; ] Obsolete#

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ also-notify { ip_addr; [ ip_addr; ... ] }; ] Yes

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ forward ( only | first ); ] Yes

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ forwarders { [ in_addr ; [ in_addr ; ... ] ] }; ] Yes

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ check-names ... ] No

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ allow-query { address_match_list }; ] Yes@

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ allow-transfer { address_match_list }; ] Yes@

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ allow-recursion { address_match_list }; ] Yes@

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ blackhole { address_match_list }; ] Yes

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ listen-on [ port ip_port ] { address_match_list }; ] Yes@

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ listen-on-v6 [ port ip_port ] { address_match_list }; ] Yes*

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ query-source ... ] Yes

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ query-source-v6 ... ] Yes*

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ lame-ttl number; ] Yes

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ max-transfer-time-in number; ] Yes

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ max-transfer-idle-in number; ] Yes*

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ max-transfer-time-out number; ] Yes*

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ max-transfer-idle-out number; ] Yes*

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ max-cache-ttl number; ] Yes*

dbeb32261081835bb9ba44db68df5dfed0fda411Andreas Gustafsson [ max-ncache-ttl number; ] Yes

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ max-cache-size size_spec; ] No*

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ min-roots number; ] Obsolete

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ serial-queries number; ] Obsolete

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ transfer-format ( one-answer | many-answers ); ] Yes

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ transfers-in number; ] Yes

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ transfers-out number; ] Yes

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ transfers-per-ns number; ] Yes

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ transfer-source ip_addr; ] Yes

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ transfer-source-v6 ip_addr; ] Yes*

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ request-ixfr yes_or_no; ] Yes*

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ provide-ixfr yes_or_no; ] Yes*

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ maintain-ixfr-base yes_or_no; ] Obsolete

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ max-ixfr-log-size number; ] Obsolete

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ coresize size_spec ; ] No

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ datasize size_spec ; ] No

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ files size_spec ; ] No

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ stacksize size_spec ; ] No

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ cleaning-interval number; ] Yes

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ heartbeat-interval number; ] Yes

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ interface-interval number; ] Yes

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ statistics-interval number; ] No

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ topology { address_match_list }; ] No

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ sortlist { address_match_list }; ] No

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ rrset-order { order_spec ; [ order_spec ; ... ] }; ] No

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ recursive-clients number; ] Yes*

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ tcp-clients number; ] Yes*

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ tkey-domain ... ] Yes*

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ tkey-dhkey ... ] Yes*

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ port number; ] Yes*

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ sig-validity-interval number; ] Yes*

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson};

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafssonacl Yes@

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafssoninclude Yes

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafssonkey Yes

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafssonlogging Yes

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafssoncontrols {

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ inet ... ] Yes%

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ unix ... ] Obsolete

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson};

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafssonserver ip_addr {

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ bogus yes_or_no; ] Yes

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ request-ixfr yes_or_no; ] Yes*

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ provide-ixfr yes_or_no; ] Yes*

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ support-ixfr yes_or_no; ] Obsolete

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ transfers number; ] Yes

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ transfer-format ( one-answer | many-answers ); ] Yes

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ keys { key_id [key_id ... ] }; ] Yes

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson};

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafssontrusted-keys Yes

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafssonzone "domain_name" [ ( in | hs | hesiod | chaos ) ] {

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson type master; Yes

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson file path_name; Yes

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ forward ( only | first ); ] Yes

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ forwarders { [ ip_addr ; [ ip_addr ; ... ] ] }; ] Yes

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ check-names ( warn | fail | ignore ); ] No

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ allow-update { address_match_list }; ] Yes@

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ update-policy ... ] Yes*

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ allow-query { address_match_list }; ] Yes@

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ allow-transfer { address_match_list }; ] Yes@

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ dialup yes_or_no; ] No

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ max-transfer-time-out number; ] Yes*

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ max-transfer-idle-out number; ] Yes*

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ notify yes_or_no; ] Yes

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ also-notify { ip_addr; [ ip_addr; ... ] }; Yes

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ ixfr-base path_name; ] Obsolete

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ pubkey number number number string; ] No

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ sig-validity-interval number; ] Yes*

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson};

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafssonzone "domain_name" [ ( in | hs | hesiod | chaos ) ] {

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson type slave; Yes

250ed9e230b3903b1b264dd1ed2f691fc7cd2f8fAndreas Gustafsson [ file path_name; ] Yes

[ ixfr-base path_name; ] Obsolete

masters [ port ip_port ] { ip_addr; [ ip_addr; ... ] }; Yes

[ forward ( only | first ); ] Yes

[ forwarders { [ ip_addr ; [ ip_addr ; ... ] ] }; ] Yes

[ check-names ( warn | fail | ignore ); ] No

[ allow-update { address_match_list }; ] Obsolete

[ allow-update-forwarding { address_match_list }; ] No*

[ allow-query { address_match_list }; ] Yes@

[ allow-transfer { address_match_list }; ] Yes@

[ transfer-source ip_addr; ] Yes

[ transfer-source-v6 ip_addr; ] Yes*

[ dialup yes_or_no; ] No

[ max-transfer-time-in number; ] Yes

[ max-transfer-idle-in number; ] Yes*

[ max-transfer-time-out number; ] Yes*

[ max-transfer-idle-out number; ] Yes*

[ notify yes_or_no; ] Yes

[ also-notify { ip_addr; [ ip_addr; ... ] }; Yes

[ pubkey number number number string; ] No

};

zone "domain_name" [ ( in | hs | hesiod | chaos ) ] {

type stub; Yes

[ file path_name; ] Yes

masters [ port ip_port ] { ip_addr; [ ip_addr; ... ] }; Yes

[ forward ( only | first ); ] Yes

[ forwarders { [ ip_addr ; [ ip_addr ; ... ] ] }; ] Yes

[ check-names ( warn | fail | ignore ); ] No

[ allow-update { address_match_list }; ] Obsolete

[ allow-update-forwarding { address_match_list }; ] Yes*

[ allow-query { address_match_list }; ] Yes@

[ allow-transfer { address_match_list }; ] Yes@

[ transfer-source ip_addr; ] Yes

[ transfer-source-v6 ip_addr; ] Yes*

[ dialup yes_or_no; ] Yes

[ max-transfer-time-in number; ] Yes

[ max-transfer-idle-in number; ] Yes*

[ max-transfer-time-out number; ] Yes*

[ max-transfer-idle-out number; ] Yes*

[ pubkey number number number string; ] No

};

zone "domain_name" [ ( in | hs | hesiod | chaos ) ] {

type forward; Yes

[ forward ( only | first ); ] Yes

[ forwarders { [ ip_addr ; [ ip_addr ; ... ] ] }; ] Yes

};

zone "." [ ( in | hs | hesiod | chaos ) ] {

type hint; Yes

file path_name; Yes

[ check-names ( warn | fail | ignore ); ] No

};

view "view_name" [ ( in | hs | hesiod | chaos ) ] { Yes*

match-clients { address_match_list }; Yes*

[ zone ... ] Yes

[ auth-nxdomain yes_or_no; ] Yes

[ fetch-glue yes_or_no; ] Obsolete

[ notify yes_or_no; ] Yes

[ recursion yes_or_no; ] Yes

[ rfc2308-type1 yes_or_no; ] No

[ also-notify { ip_addr; [ ip_addr; ... ] }; ] Yes

[ forward ( only | first ); ] Yes

[ forwarders { [ in_addr ; [ in_addr ; ... ] ] }; ] Yes

[ check-names ... ] No

[ allow-query { address_match_list }; ] Yes

[ allow-transfer { address_match_list }; ] Yes

[ allow-recursion { address_match_list }; ] Yes

[ query-source ... ] Yes

[ query-source-v6 ... ] Yes

[ lame-ttl number; ] Yes

[ max-transfer-time-out number; ] Yes*

[ max-transfer-idle-out number; ] Yes*

[ max-cache-ttl number; ] Yes*

[ max-ncache-ttl number; ] Yes

[ max-cache-size size_spec; ] No*

[ min-roots number; ] Obsolete

[ transfer-format ( one-answer | many-answers ); ] Yes

[ transfer-source ip_addr; ] Yes

[ transfer-source-v6 ip_addr; ] Yes*

[ request-ixfr yes_or_no; ] Yes*

[ provide-ixfr yes_or_no;] Yes*

[ cleaning-interval number; ] Yes

[ topology { address_match_list }; ] No

[ sortlist { address_match_list }; ] No

[ rrset-order { order_spec ; [ order_spec ; ... ] }; ] No

[ key ... ] Yes

[ server ... ] Yes

[ trusted-keys ... ] Yes

[ sig-validity-interval number; ] Yes*

};