mir/bind
2
0
Fork 0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-09-03 16:15:27 +00:00
Code Issues Releases Wiki Activity

Add good dnssec-policy tag-range variants test examples

Browse Source
This commit is contained in:
Mark Andrews
2024-08-08 12:31:23 +10:00
parent 035289be71
commit e7decd7a65
2 changed files with 27 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

26
bin/tests/system/checkconf/good-dnssec-policy-range.conf Normal file
View File

@@ -0,0 +1,26 @@
/*
* Copyright (C) Internet Systems Consortium, Inc. ("ISC")
*
* SPDX-License-Identifier: MPL-2.0
*
* This Source Code Form is subject to the terms of the Mozilla Public
* License, v. 2.0. If a copy of the MPL was not distributed with this
* file, you can obtain one at https://mozilla.org/MPL/2.0/.
*
* See the COPYRIGHT file distributed with this work for additional
* information regarding copyright ownership.
*/
dnssec-policy restricted-range {
keys {
ksk lifetime unlimited algorithm rsasha256 tag-range 0 32767 2048;
zsk lifetime unlimited algorithm rsasha256 tag-range 0 32767;
};
};
dnssec-policy unrestricted-range {
keys {
ksk lifetime unlimited algorithm rsasha256 2048;
zsk lifetime unlimited algorithm rsasha256;
};
};

2
bin/tests/system/checkconf/good.conf.in
View File

@@ -23,7 +23,7 @@ dnssec-policy "test" {
}; };
dnskey-ttl 3600; dnskey-ttl 3600;
keys { keys {
ksk key-directory lifetime P1Y algorithm 13; ksk key-directory lifetime P1Y algorithm 13 tag-range 0 32767;
zsk lifetime P30D algorithm 13; zsk lifetime P30D algorithm 13;
csk key-store "hsm" lifetime P30D algorithm 8 2048; csk key-store "hsm" lifetime P30D algorithm 8 2048;
}; };