ba564c
[ req ]
ba564c
default_bits = 3072
ba564c
distinguished_name = req_distinguished_name
ba564c
prompt = no
ba564c
x509_extensions = myexts
ba564c
ba564c
[ req_distinguished_name ]
6c758c
O = CentOS
6c758c
CN = CentOS kernel signing key
6c758c
emailAddress = security@centos.org
ba564c
ba564c
[ myexts ]
ba564c
basicConstraints=critical,CA:FALSE
ba564c
keyUsage=digitalSignature
ba564c
subjectKeyIdentifier=hash
ba564c
authorityKeyIdentifier=keyid