external/bsd/bind/dist/contrib/zkt-1.1.3/examples/views/dnssec-extern.conf

   1 #
   2 #       @(#) dnssec.conf vT0.96 (c) Feb 2005 - May 2008 Holger Zuleger hznet.de
   3 #
   4
   5 #   dnssec-zkt options
   6 Zonedir:        "extern"
   7 Recursive:      True
   8 PrintTime:      False
   9 PrintAge:       True
  10 LeftJustify:    False
  11
  12 #   zone specific values
  13 ResignInterval: 1w      # (604800 seconds)
  14 Sigvalidity:    10d     # (864000 seconds)
  15 Max_TTL:        8h      # (28800 seconds)
  16 Propagation:    5m      # (300 seconds)
  17 KEY_TTL:        1h      # (3600 seconds)
  18 Serialformat:   unixtime
  19
  20 #   signing key parameters
  21 KSK_lifetime:   1y      # (31536000 seconds)
  22 KSK_algo:       RSASHA1 # (Algorithm ID 5)
  23 KSK_bits:       1300
  24 KSK_randfile:   "/dev/urandom"
  25 ZSK_lifetime:   30d     # (2592000 seconds)
  26 ZSK_algo:       RSASHA1 # (Algorithm ID 5)
  27 ZSK_bits:       512
  28 ZSK_randfile:   "/dev/urandom"
  29
  30 #   dnssec-signer options
  31 LogFile:        "zkt-ext.log"
  32 LogLevel:       "debug"
  33 SyslogFacility: "none"
  34 SyslogLevel:    "notice"
  35 VerboseLog:     2
  36 Keyfile:        "dnskey.db"
  37 Zonefile:       "zone.db"
  38 DLV_Domain:     ""
  39 Sig_Pseudorand: True