6c3baf
[ req ]
6c3baf
default_bits = 3072
6c3baf
distinguished_name = req_distinguished_name
6c3baf
prompt = no
6c3baf
x509_extensions = myexts
6c3baf
6c3baf
[ req_distinguished_name ]
6b79b0
O = CentOS
6b79b0
CN = CentOS Linux kernel signing key
6b79b0
emailAddress = security@centos.org
6c3baf
6c3baf
[ myexts ]
6c3baf
basicConstraints=critical,CA:FALSE
6c3baf
keyUsage=digitalSignature
6c3baf
subjectKeyIdentifier=hash
6c3baf
authorityKeyIdentifier=keyid