18260f9a8Schristos/* 28260f9a8Schristos * Copyright (C) Internet Systems Consortium, Inc. ("ISC") 38260f9a8Schristos * 4*497bf0b8Schristos * SPDX-License-Identifier: MPL-2.0 5*497bf0b8Schristos * 68260f9a8Schristos * This Source Code Form is subject to the terms of the Mozilla Public 78260f9a8Schristos * License, v. 2.0. If a copy of the MPL was not distributed with this 8*497bf0b8Schristos * file, you can obtain one at https://mozilla.org/MPL/2.0/. 98260f9a8Schristos * 108260f9a8Schristos * See the COPYRIGHT file distributed with this work for additional 118260f9a8Schristos * information regarding copyright ownership. 128260f9a8Schristos */ 138260f9a8Schristos 148260f9a8Schristosdnssec-policy "csk-algoroll" { 158260f9a8Schristos signatures-refresh P5D; 168260f9a8Schristos signatures-validity 30d; 178260f9a8Schristos signatures-validity-dnskey 30d; 188260f9a8Schristos 198260f9a8Schristos keys { 208260f9a8Schristos csk lifetime unlimited algorithm @DEFAULT_ALGORITHM@; 218260f9a8Schristos }; 228260f9a8Schristos 238260f9a8Schristos dnskey-ttl 1h; 248260f9a8Schristos publish-safety PT1H; 258260f9a8Schristos retire-safety 2h; 268260f9a8Schristos zone-propagation-delay 3600; 278260f9a8Schristos max-zone-ttl 6h; 288260f9a8Schristos parent-propagation-delay pt1h; 298260f9a8Schristos parent-ds-ttl 7200; 308260f9a8Schristos}; 31