[Opendnssec-develop] Action point: check your code against the requirements

Matthijs Mekking matthijs at NLnetLabs.nl
Tue Sep 15 12:15:24 UTC 2009


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

If nobody objects, I would like to add the following requirements to the
wiki:

The system SHOULD be able to send a notify command to the local nameserver.

The system MUST be able to drop privileges upon start up

It MUST be possible to update the polices and zone data, without taking
the system down.

The system SHOULD be able to deal with (variable) durations.

The policy for the zone MUST allow values for the following signing
parameters to be set:
        * Signature re-sign interval
        * Signature refresh interval

The policy MUST allow values for the following NSEC3 parameters to be set:
        * Opt-Out
        * Algorithm
        * Iterations
        * Salt
        * TTL?

The policy SHOULD allow values for the following SOA parameters to be set:
        * Minimum
        * TTL
        * Serial


- - Matthijs
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iQEcBAEBAgAGBQJKr4VZAAoJEA8yVCPsQCW52HQIAM70l29CvFf1Rp2gJLT59q/h
oWv+ZvaSAPPu3P7LD+uMppvntrpNgCzCqm8xLvlU4VZ2MWCUdnj4guc8yKJhYGvl
qOKropPdi5JxXLm5Wv0dA4tYsr4XltLTKM7OWkb68lgMgiduOfo3zIpkX8I3MJRB
gC0hKM9XmjyzN1+vDVuK3Lz3t2iInAJPWMrQyndDlm0TACqsoQNPFa/7rg2KsIFq
+pIYo7s3rBRxKnVWYCZVXpHhplzIEqEmULGxbs+jukoeyEbukXrti6jQVQ7eLZ6+
KA7SRSnmpgQd07lkLWsl/cjqJFztJ5r3dTZ7gn2Rzb7dg5N/CLplytwPlPEI4B8=
=sQp0
-----END PGP SIGNATURE-----



More information about the Opendnssec-develop mailing list