73e442
[ req ]
73e442
default_bits = 4096
73e442
distinguished_name = req_distinguished_name
73e442
prompt = no
73e442
x509_extensions = myexts
73e442
73e442
[ req_distinguished_name ]
73e442
O = Fedora
73e442
CN = Fedora kernel signing key
73e442
emailAddress = kernel-team@fedoraproject.org
73e442
73e442
[ myexts ]
73e442
basicConstraints=critical,CA:FALSE
73e442
keyUsage=digitalSignature
73e442
subjectKeyIdentifier=hash
73e442
authorityKeyIdentifier=keyid