external/bsd/bind/dist/contrib/zkt-1.1.3/examples/hierarchical/dnssec.conf

   1 #
   2 #       @(#) dnssec.conf T1.0rc1 (c) Feb 2005 - Mar 2010 Holger Zuleger hznet.de
   3 #
   4
   5 #   dnssec-zkt options
   6 Zonedir:        "."
   7 Recursive:      True
   8 PrintTime:      False
   9 PrintAge:       True
  10 LeftJustify:    False
  11
  12 #   zone specific values
  13 ResignInterval: 1w      # (604800 seconds)
  14 Sigvalidity:    10d     # (864000 seconds)
  15 Max_TTL:        6h      # (21600 seconds)
  16 Propagation:    5m      # (300 seconds)
  17 KEY_TTL:        1h      # (3600 seconds)
  18 Serialformat:   incremental
  19
  20 #   signing key parameters
  21 Key_Algo:       RSASHA1 # (Algorithm ID 5)
  22 KSK_lifetime:   30d
  23 KSK_bits:       1300
  24 KSK_randfile:   "/dev/urandom"
  25 ZSK_lifetime:   10d
  26 ZSK_bits:       512
  27 ZSK_randfile:   "/dev/urandom"
  28 SaltBits:       24
  29
  30 #   dnssec-signer options
  31 LogFile:        "log"
  32 LogLevel:       INFO
  33 LogDomainDir:   "log"
  34 SyslogFacility: USER
  35 SyslogLevel:    NOTICE
  36 VerboseLog:     0
  37 Keyfile:        "dnskey.db"
  38 Zonefile:       "zone.db"
  39 KeySetDir:      ".."
  40 DLV_Domain:     ""
  41 Sig_Pseudorand: True
  42 Sig_GenerateDS: True
  43 Sig_DnsKeyKSK:  True
  44 Sig_Parameter:  ""