af29e1
[ req ]
af29e1
default_bits = 3072
af29e1
distinguished_name = req_distinguished_name
af29e1
prompt = no
af29e1
x509_extensions = myexts
af29e1
af29e1
[ req_distinguished_name ]
43e3e4
O = CentOS
43e3e4
CN = CentOS kernel signing key
43e3e4
emailAddress = security@centos.org
af29e1
af29e1
[ myexts ]
af29e1
basicConstraints=critical,CA:FALSE
af29e1
keyUsage=digitalSignature
af29e1
subjectKeyIdentifier=hash
af29e1
authorityKeyIdentifier=keyid