42d1a9
[ req ]
42d1a9
default_bits = 3072
42d1a9
distinguished_name = req_distinguished_name
42d1a9
prompt = no
42d1a9
x509_extensions = myexts
42d1a9
42d1a9
[ req_distinguished_name ]
42d1a9
O = Red Hat
42d1a9
CN = Red Hat Enterprise Linux kernel signing key
42d1a9
emailAddress = secalert@redhat.com
42d1a9
42d1a9
[ myexts ]
42d1a9
basicConstraints=critical,CA:FALSE
42d1a9
keyUsage=digitalSignature
42d1a9
subjectKeyIdentifier=hash
42d1a9
authorityKeyIdentifier=keyid