b1b780
[ req ]
b1b780
default_bits = 3072
b1b780
distinguished_name = req_distinguished_name
b1b780
prompt = no
b1b780
x509_extensions = myexts
b1b780
b1b780
[ req_distinguished_name ]
f8e564
O = Red Hat
f8e564
CN = Red Hat Enterprise Linux kernel signing key
f8e564
emailAddress = secalert@redhat.com
b1b780
b1b780
[ myexts ]
b1b780
basicConstraints=critical,CA:FALSE
b1b780
keyUsage=digitalSignature
b1b780
subjectKeyIdentifier=hash
b1b780
authorityKeyIdentifier=keyid