Parametrize RRSIG Expiration Dates independently for ZSK and KSK-signed RRs

niclabs / dns-tools

DNS tools for zone signature (file, pkcs11-hsm) and validation, and zone digest (ZONEMD)

MIT License

16 stars 4 forks source link

Closed eriverosr closed 4 years ago

eriverosr commented 4 years ago

Given ZSK signatures are more common than KSK ones, it is desirable to be able to parametrize both values independently.

Define new flags for each parameter
Define a default value for each type of signature (3 months for KSK and 1 month for ZSK?)

eriverosr commented 4 years ago

Done in latest commit.