af29e1
[ req ]
af29e1
default_bits = 3072
af29e1
distinguished_name = req_distinguished_name
af29e1
prompt = no
af29e1
x509_extensions = myexts
af29e1
af29e1
[ req_distinguished_name ]
b175c1
O = Red Hat
b175c1
CN = Red Hat Enterprise Linux kernel signing key
b175c1
emailAddress = secalert@redhat.com
af29e1
af29e1
[ myexts ]
af29e1
basicConstraints=critical,CA:FALSE
af29e1
keyUsage=digitalSignature
af29e1
subjectKeyIdentifier=hash
af29e1
authorityKeyIdentifier=keyid