ba564c
[ req ]
ba564c
default_bits = 3072
ba564c
distinguished_name = req_distinguished_name
ba564c
prompt = no
ba564c
x509_extensions = myexts
ba564c
ba564c
[ req_distinguished_name ]
e9cecf
O = Red Hat
e9cecf
CN = Red Hat Enterprise Linux kernel signing key
e9cecf
emailAddress = secalert@redhat.com
ba564c
ba564c
[ myexts ]
ba564c
basicConstraints=critical,CA:FALSE
ba564c
keyUsage=digitalSignature
ba564c
subjectKeyIdentifier=hash
ba564c
authorityKeyIdentifier=keyid