Share via

2.2.5.1.5 ZONE_SKD_ROLLOVER_TYPE

  • Article

The ZONE_SKD_ROLLOVER_TYPE enumeration is a 32-bit integer value that specifies possible key rollover, as specified in [RFC4641] and [RFC5011], types for a signing key descriptor. An implementation SHOULD<36> support all values.

Constant/value

Description

DNS_ROLLOVER_TYPE_PREPUBLISH

0x00000000

A method of key rollover in which the new key is published in the zone before it will be used. See [RFC4641] section 4.2.

DNS_ROLLOVER_TYPE_DOUBLE_SIGNATURE

0x00000001

A method of key rollover in which data is signed by both old and new keys simultaneously for a period of time. See [RFC4641] section 4.2.