ba564c
[ req ]
ba564c
default_bits = 3072
ba564c
distinguished_name = req_distinguished_name
ba564c
prompt = no
ba564c
x509_extensions = myexts
ba564c
ba564c
[ req_distinguished_name ]
ac3fbd
O = Red Hat
ac3fbd
CN = Red Hat Enterprise Linux kernel signing key
ac3fbd
emailAddress = secalert@redhat.com
ba564c
ba564c
[ myexts ]
ba564c
basicConstraints=critical,CA:FALSE
ba564c
keyUsage=digitalSignature
ba564c
subjectKeyIdentifier=hash
ba564c
authorityKeyIdentifier=keyid