Commit 4dd6e3f6 authored by Libor Peltan's avatar Libor Peltan Committed by Daniel Salzman

conf: enable explicit setting of ksk-lifetime to 0 = infty

parent d02f7ce9
......@@ -661,7 +661,7 @@ ZSK key lifetime is also infuenced by propagation\-delay and dnskey\-ttl
.sp
A period between KSK publication and the next rollover initiation.
.sp
\fIDefault:\fP infinity
\fIDefault:\fP 0
.sp
\fBNOTE:\fP
.INDENT 0.0
......@@ -669,7 +669,7 @@ A period between KSK publication and the next rollover initiation.
KSK key lifetime is also infuenced by propagation\-delay, dnskey\-ttl,
and KSK submission delay.
.sp
The default infinite value causes no KSK rollover as a result.
Zero (aka infinity) value causes no KSK rollover as a result.
.sp
This applies for CSK lifetime if single\-type\-signing is enabled.
.UNINDENT
......
......@@ -753,13 +753,13 @@ ksk-lifetime
A period between KSK publication and the next rollover initiation.
*Default:* infinity
*Default:* 0
.. NOTE::
KSK key lifetime is also infuenced by propagation-delay, dnskey-ttl,
and KSK submission delay.
The default infinite value causes no KSK rollover as a result.
Zero (aka infinity) value causes no KSK rollover as a result.
This applies for CSK lifetime if single-type-signing is enabled.
......
......@@ -253,7 +253,7 @@ static const yp_item_t desc_policy[] = {
CONF_IO_FRLD_ZONES },
{ C_ZSK_LIFETIME, YP_TINT, YP_VINT = { 1, UINT32_MAX, DAYS(30), YP_STIME },
CONF_IO_FRLD_ZONES },
{ C_KSK_LIFETIME, YP_TINT, YP_VINT = { 1, UINT32_MAX, 0, YP_STIME },
{ C_KSK_LIFETIME, YP_TINT, YP_VINT = { 0, UINT32_MAX, 0, YP_STIME },
CONF_IO_FRLD_ZONES },
{ C_PROPAG_DELAY, YP_TINT, YP_VINT = { 0, UINT32_MAX, HOURS(1), YP_STIME },
CONF_IO_FRLD_ZONES },
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment