[Freeipa-devel] [PATCH 0249] DNSSEC: update kasp configuration template: increase key size & lifetime

[Petr Spacek]

On 14.5.2015 17:23, Martin Basti wrote:
> https://fedorahosted.org/freeipa/ticket/4657

Looking at 3072 bit key size, I think we can prolong KSK key rotation period
to 2 years.

It should be okay according to http://dx.doi.org/10.6028/NIST.SP.800-81-2
section 11.2.

Modified patch is attached.

Thank you for reviewing it :-)

-- 
Petr^2 Spacek
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-mbasti-0249-pspacek-2-DNSSEC-update-opendnssec-kasp-configuration.patch
Type: text/x-patch
Size: 3270 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20150515/444e1018/attachment.bin>