ff323d
[ req ]
ff323d
default_bits = 3072
ff323d
distinguished_name = req_distinguished_name
ff323d
prompt = no
ff323d
x509_extensions = myexts
ff323d
ff323d
[ req_distinguished_name ]
ff323d
O = The CentOS Project
ff323d
CN = CentOS Stream kernel signing key
ff323d
emailAddress = security@centos.org
ff323d
ff323d
[ myexts ]
ff323d
basicConstraints=critical,CA:FALSE
ff323d
keyUsage=digitalSignature
ff323d
subjectKeyIdentifier=hash
ff323d
authorityKeyIdentifier=keyid