51b83a
[ req ]
51b83a
default_bits = 3072
51b83a
distinguished_name = req_distinguished_name
51b83a
prompt = no
51b83a
x509_extensions = myexts
51b83a
51b83a
[ req_distinguished_name ]
51b83a
O = The CentOS Project
51b83a
CN = CentOS Stream kernel signing key
51b83a
emailAddress = security@centos.org
51b83a
51b83a
[ myexts ]
51b83a
basicConstraints=critical,CA:FALSE
51b83a
keyUsage=digitalSignature
51b83a
subjectKeyIdentifier=hash
51b83a
authorityKeyIdentifier=keyid