6c3baf
[ req ]
6c3baf
default_bits = 3072
6c3baf
distinguished_name = req_distinguished_name
6c3baf
prompt = no
6c3baf
x509_extensions = myexts
6c3baf
6c3baf
[ req_distinguished_name ]
4ce0a9
O = CentOS
4ce0a9
CN = CentOS Linux kernel signing key
4ce0a9
emailAddress = security@centos.org
6c3baf
6c3baf
[ myexts ]
6c3baf
basicConstraints=critical,CA:FALSE
6c3baf
keyUsage=digitalSignature
6c3baf
subjectKeyIdentifier=hash
6c3baf
authorityKeyIdentifier=keyid