44a40b
[ req ]
44a40b
default_bits = 3072
44a40b
distinguished_name = req_distinguished_name
44a40b
prompt = no
44a40b
x509_extensions = myexts
44a40b
44a40b
[ req_distinguished_name ]
44a40b
O = Red Hat
44a40b
CN = Red Hat Enterprise Linux kernel signing key
44a40b
emailAddress = secalert@redhat.com
44a40b
44a40b
[ myexts ]
44a40b
basicConstraints=critical,CA:FALSE
44a40b
keyUsage=digitalSignature
44a40b
subjectKeyIdentifier=hash
44a40b
authorityKeyIdentifier=keyid