ba564c
[ req ]
ba564c
default_bits = 3072
ba564c
distinguished_name = req_distinguished_name
ba564c
prompt = no
ba564c
x509_extensions = myexts
ba564c
ba564c
[ req_distinguished_name ]
510ee4
O = CentOS
510ee4
CN = CentOS Linux kernel signing key
510ee4
emailAddress = security@centos.org
ba564c
ba564c
[ myexts ]
ba564c
basicConstraints=critical,CA:FALSE
ba564c
keyUsage=digitalSignature
ba564c
subjectKeyIdentifier=hash
ba564c
authorityKeyIdentifier=keyid