Commit 4dd6e3f6 authored by Libor Peltan's avatar Libor Peltan Committed by Daniel Salzman

conf: enable explicit setting of ksk-lifetime to 0 = infty

parent d02f7ce9
...@@ -661,7 +661,7 @@ ZSK key lifetime is also infuenced by propagation\-delay and dnskey\-ttl ...@@ -661,7 +661,7 @@ ZSK key lifetime is also infuenced by propagation\-delay and dnskey\-ttl
.sp .sp
A period between KSK publication and the next rollover initiation. A period between KSK publication and the next rollover initiation.
.sp .sp
\fIDefault:\fP infinity \fIDefault:\fP 0
.sp .sp
\fBNOTE:\fP \fBNOTE:\fP
.INDENT 0.0 .INDENT 0.0
...@@ -669,7 +669,7 @@ A period between KSK publication and the next rollover initiation. ...@@ -669,7 +669,7 @@ A period between KSK publication and the next rollover initiation.
KSK key lifetime is also infuenced by propagation\-delay, dnskey\-ttl, KSK key lifetime is also infuenced by propagation\-delay, dnskey\-ttl,
and KSK submission delay. and KSK submission delay.
.sp .sp
The default infinite value causes no KSK rollover as a result. Zero (aka infinity) value causes no KSK rollover as a result.
.sp .sp
This applies for CSK lifetime if single\-type\-signing is enabled. This applies for CSK lifetime if single\-type\-signing is enabled.
.UNINDENT .UNINDENT
......
...@@ -753,13 +753,13 @@ ksk-lifetime ...@@ -753,13 +753,13 @@ ksk-lifetime
A period between KSK publication and the next rollover initiation. A period between KSK publication and the next rollover initiation.
*Default:* infinity *Default:* 0
.. NOTE:: .. NOTE::
KSK key lifetime is also infuenced by propagation-delay, dnskey-ttl, KSK key lifetime is also infuenced by propagation-delay, dnskey-ttl,
and KSK submission delay. and KSK submission delay.
The default infinite value causes no KSK rollover as a result. Zero (aka infinity) value causes no KSK rollover as a result.
This applies for CSK lifetime if single-type-signing is enabled. This applies for CSK lifetime if single-type-signing is enabled.
......
...@@ -253,7 +253,7 @@ static const yp_item_t desc_policy[] = { ...@@ -253,7 +253,7 @@ static const yp_item_t desc_policy[] = {
CONF_IO_FRLD_ZONES }, CONF_IO_FRLD_ZONES },
{ C_ZSK_LIFETIME, YP_TINT, YP_VINT = { 1, UINT32_MAX, DAYS(30), YP_STIME }, { C_ZSK_LIFETIME, YP_TINT, YP_VINT = { 1, UINT32_MAX, DAYS(30), YP_STIME },
CONF_IO_FRLD_ZONES }, CONF_IO_FRLD_ZONES },
{ C_KSK_LIFETIME, YP_TINT, YP_VINT = { 1, UINT32_MAX, 0, YP_STIME }, { C_KSK_LIFETIME, YP_TINT, YP_VINT = { 0, UINT32_MAX, 0, YP_STIME },
CONF_IO_FRLD_ZONES }, CONF_IO_FRLD_ZONES },
{ C_PROPAG_DELAY, YP_TINT, YP_VINT = { 0, UINT32_MAX, HOURS(1), YP_STIME }, { C_PROPAG_DELAY, YP_TINT, YP_VINT = { 0, UINT32_MAX, HOURS(1), YP_STIME },
CONF_IO_FRLD_ZONES }, CONF_IO_FRLD_ZONES },
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment