ba564c
[ req ]
ba564c
default_bits = 3072
ba564c
distinguished_name = req_distinguished_name
ba564c
prompt = no
ba564c
x509_extensions = myexts
ba564c
ba564c
[ req_distinguished_name ]
a22bb1
O = Red Hat
a22bb1
CN = Red Hat Enterprise Linux kernel signing key
a22bb1
emailAddress = secalert@redhat.com
ba564c
ba564c
[ myexts ]
ba564c
basicConstraints=critical,CA:FALSE
ba564c
keyUsage=digitalSignature
ba564c
subjectKeyIdentifier=hash
ba564c
authorityKeyIdentifier=keyid