Add another dnssec policy, use it

2023-02-26 09:59:43 -05:00
parent be25d603f4
commit 66f7632777
3 changed files with 12 additions and 1 deletions
--- a/cfg/named.dnssec.conf
+++ b/cfg/named.dnssec.conf
@@ -4,4 +4,12 @@ dnssec-policy "simple_alg15" {
        csk lifetime unlimited algorithm ed25519;
    };
    nsec3param iterations 0 optout no salt-length 0;
+};
+
+dnssec-policy "default_alg13" {
+    dnskey-ttl 86400;
+    keys {
+        ksk lifetime unlimited algorithm 13;
+        zsk lifetime P90D algorithm 13;
+    };
 };