18260f9a8Schristos/*
28260f9a8Schristos * Copyright (C) Internet Systems Consortium, Inc. ("ISC")
38260f9a8Schristos *
4*497bf0b8Schristos * SPDX-License-Identifier: MPL-2.0
5*497bf0b8Schristos *
68260f9a8Schristos * This Source Code Form is subject to the terms of the Mozilla Public
78260f9a8Schristos * License, v. 2.0.  If a copy of the MPL was not distributed with this
8*497bf0b8Schristos * file, you can obtain one at https://mozilla.org/MPL/2.0/.
98260f9a8Schristos *
108260f9a8Schristos * See the COPYRIGHT file distributed with this work for additional
118260f9a8Schristos * information regarding copyright ownership.
128260f9a8Schristos */
138260f9a8Schristos
148260f9a8Schristosdnssec-policy "csk-algoroll" {
158260f9a8Schristos	signatures-refresh P5D;
168260f9a8Schristos	signatures-validity 30d;
178260f9a8Schristos	signatures-validity-dnskey 30d;
188260f9a8Schristos
198260f9a8Schristos	keys {
208260f9a8Schristos		csk lifetime unlimited algorithm @DEFAULT_ALGORITHM@;
218260f9a8Schristos	};
228260f9a8Schristos
238260f9a8Schristos	dnskey-ttl 1h;
248260f9a8Schristos	publish-safety PT1H;
258260f9a8Schristos	retire-safety 2h;
268260f9a8Schristos	zone-propagation-delay 3600;
278260f9a8Schristos	max-zone-ttl 6h;
288260f9a8Schristos	parent-propagation-delay pt1h;
298260f9a8Schristos	parent-ds-ttl 7200;
308260f9a8Schristos};
31