mir/bind
2
0
Fork 0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-08-31 14:35:26 +00:00
Code Issues Releases Wiki Activity

Add kasp nsec3param configuration

Browse Source 
Add configuration and documentation on how to enable NSEC3 when
using dnssec-policy for signing your zones.
This commit is contained in:
Matthijs Mekking
2020-10-09 14:19:10 +02:00
parent 84a4273074
commit f7ca96c805
11 changed files with 72 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
doc/misc/options
View File

@@ -26,6 +26,8 @@ dnssec-policy <string> {
keys { ( csk | ksk | zsk ) [ ( key-directory ) ] lifetime
<duration_or_unlimited> algorithm <string> [ <integer> ]; ... };
max-zone-ttl <duration>;
nsec3param [ iterations <integer> ] [ optout <boolean> ] [ salt
<string> ];
parent-ds-ttl <duration>;
parent-propagation-delay <duration>;
parent-registration-delay <duration>; // obsolete