| [ req ] |
| default_bits = 3072 |
| distinguished_name = req_distinguished_name |
| prompt = no |
| x509_extensions = myexts |
|
|
| [ req_distinguished_name ] |
| O = CentOS |
| CN = CentOS Linux kernel signing key |
| emailAddress = security@centos.org |
|
|
| [ myexts ] |
| basicConstraints=critical,CA:FALSE |
| keyUsage=digitalSignature |
| subjectKeyIdentifier=hash |
| authorityKeyIdentifier=keyid |