96f6d6c DNSSEC: update OpenDNSSEC KASP configuration

1 file Authored by mbasti 8 years ago, Committed by jcholast 8 years ago,
    DNSSEC: update OpenDNSSEC KASP configuration
    
    * remove unneeded parts
    * increase KSK key length to 3072
    * increase KSK key lifetime to 2 years (see NIST SP 800-81-2 section 11.2)
    
    Update is not required, as template contains just recommended values
    which should by reviewed by administrators.
    
    https://fedorahosted.org/freeipa/ticket/4657
    
    Reviewed-By: Petr Spacek <pspacek@redhat.com>