child.zonefile_sync = 24 * 60 * 60
child.dnssec(child_zone).ksk_sbm_check = [ parent ]
-child.add_module(child_zone, ModOnlineSign("ECDSAP384SHA384", key_size="384", prop_delay=11, ksc = [ parent ], ksci = 2, ksk_shared=True))
+child.add_module(child_zone, ModOnlineSign("ECDSAP384SHA384", key_size="384", prop_delay=11, ksc = [ parent ],
+ ksci = 2, ksk_shared=True, cds_publish="always"))
# parameters
ZONE = "example.com."
mod_name = "onlinesign"
- def __init__(self, algorithm=None, key_size=None, prop_delay=3600, ksc=[ ], ksci=999, ksk_life=9999, ksk_shared=False):
+ def __init__(self, algorithm=None, key_size=None, prop_delay=3600, ksc=[ ],
+ ksci=999, ksk_life=9999, ksk_shared=False, cds_publish="rollover"):
super().__init__()
self.algorithm = algorithm
self.key_size = key_size
self.ksci = ksci
self.ksk_life = ksk_life
self.ksk_shared = ksk_shared
+ self.cds_publish = cds_publish
def get_conf(self, conf=None):
if not conf:
conf.item("ksk-submission", "blahblah")
conf.item("ksk-lifetime", self.ksk_life)
conf.item("ksk-shared", self.ksk_shared)
+ conf.item("cds-cdnskey-publish", self.cds_publish)
conf.end()
conf.begin(self.conf_name)