16 Čec
2020
16 Čec
'20
11:43
On Wed, 15 Jul 2020 16:53:14 +0200
Jan-Piet Mens <list(a)mens.de> wrote:
I have the following signing policy configured in a
test environment:
ksk-lifetime: 30m
zsk-lifetime: 2h
These settings are insane. You shouldn't have that short lifetime for
ksk. Make sure your ksk lifetime is at least multiple times longer than
zsk lifetime.
--
Tuomo Soini <tis(a)foobar.fi>
Foobar Linux services
+358 40 5240030
Foobar Oy <https://foobar.fi/>