42d1a9
[ req ]
42d1a9
default_bits = 3072
42d1a9
distinguished_name = req_distinguished_name
42d1a9
prompt = no
42d1a9
x509_extensions = myexts
42d1a9
42d1a9
[ req_distinguished_name ]
42d1a9
O = The CentOS Project
42d1a9
CN = CentOS Stream kernel signing key
42d1a9
emailAddress = security@centos.org
42d1a9
42d1a9
[ myexts ]
42d1a9
basicConstraints=critical,CA:FALSE
42d1a9
keyUsage=digitalSignature
42d1a9
subjectKeyIdentifier=hash
42d1a9
authorityKeyIdentifier=keyid