<html><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /></head><body style='font-size: 10pt; font-family: Verdana,Geneva,sans-serif'>
<p>On 5. Nov 2018, at 15:45, list-opendnssec-user@jyborn.se wrote:<br /><br /></p>
<blockquote style="font-family: Monaco;">I'm wondering if P10Y is too long to be accepted, and<br />because of that OpenDNSSEC somehow decided to default<br />to the same Lifetime for KSK as for ZSK?</blockquote>
<p><br />Yes, 10 years should work. I do have the same settings regarding KSK:<br /><br /><span class="Apple-tab-span" style="white-space: pre;"> </span> <Keys><br /> <span class="Apple-tab-span" style="white-space: pre;"> </span><!-- Parameters for both KSK and ZSK --><br /><span class="Apple-tab-span" style="white-space: pre;"> </span><span class="Apple-tab-span" style="white-space: pre;"> </span><TTL>PT3600S</TTL><br /><span class="Apple-tab-span" style="white-space: pre;"> </span><span class="Apple-tab-span" style="white-space: pre;"> </span><RetireSafety>PT3600S</RetireSafety><br /><span class="Apple-tab-span" style="white-space: pre;"> </span><span class="Apple-tab-span" style="white-space: pre;"> </span><PublishSafety>PT3600S</PublishSafety><br /><span class="Apple-tab-span" style="white-space: pre;"> </span><span class="Apple-tab-span" style="white-space: pre;"> </span><Purge>P14D</Purge><br /><br /><span class="Apple-tab-span" style="white-space: pre;"> </span><span class="Apple-tab-span" style="white-space: pre;"> </span><!-- Parameters for KSK only --><br /><span class="Apple-tab-span" style="white-space: pre;"> </span><span class="Apple-tab-span" style="white-space: pre;"> </span><KSK><br /><span class="Apple-tab-span" style="white-space: pre;"> </span><span class="Apple-tab-span" style="white-space: pre;"> </span><span class="Apple-tab-span" style="white-space: pre;"> </span><Algorithm length="2048">8</Algorithm><br />here —><span class="Apple-tab-span" style="white-space: pre;"> </span><span class="Apple-tab-span" style="white-space: pre;"> </span><span class="Apple-tab-span" style="white-space: pre;"> </span><Lifetime>P10Y</Lifetime><br /><span class="Apple-tab-span" style="white-space: pre;"> </span><span class="Apple-tab-span" style="white-space: pre;"> </span><span class="Apple-tab-span" style="white-space: pre;"> </span><Repository>SoftHSM</Repository><br /><span class="Apple-tab-span" style="white-space: pre;"> </span><span class="Apple-tab-span" style="white-space: pre;"> </span></KSK><br /><br /><span class="Apple-tab-span" style="white-space: pre;"> </span><span class="Apple-tab-span" style="white-space: pre;"> </span><!-- Parameters for ZSK only --><br /><span class="Apple-tab-span" style="white-space: pre;"> </span><span class="Apple-tab-span" style="white-space: pre;"> </span><ZSK><br /><span class="Apple-tab-span" style="white-space: pre;"> </span><span class="Apple-tab-span" style="white-space: pre;"> </span><span class="Apple-tab-span" style="white-space: pre;"> </span><Algorithm length="2048">8</Algorithm><br /><span class="Apple-tab-span" style="white-space: pre;"> </span><span class="Apple-tab-span" style="white-space: pre;"> </span><span class="Apple-tab-span" style="white-space: pre;"> </span><Lifetime>P120D</Lifetime><!--GRIMM (end)--><br /><span class="Apple-tab-span" style="white-space: pre;"> </span><span class="Apple-tab-span" style="white-space: pre;"> </span><span class="Apple-tab-span" style="white-space: pre;"> </span><Repository>SoftHSM</Repository><br /><span class="Apple-tab-span" style="white-space: pre;"> </span><span class="Apple-tab-span" style="white-space: pre;"> </span></ZSK><br /><span class="Apple-tab-span" style="white-space: pre;"> </span></Keys><br /><br />HTH and regards,<br />Michael</p>
</body></html>