f2c60e
[ req ]
f2c60e
default_bits = 4096
f2c60e
distinguished_name = req_distinguished_name
f2c60e
prompt = no
f2c60e
x509_extensions = myexts
f2c60e
f2c60e
[ req_distinguished_name ]
f2c60e
O = CentOS
f2c60e
CN = CentOS Linux kernel signing key
f2c60e
emailAddress = security@centos.org
f2c60e
f2c60e
[ myexts ]
f2c60e
basicConstraints=critical,CA:FALSE
f2c60e
keyUsage=digitalSignature
f2c60e
subjectKeyIdentifier=hash
f2c60e
authorityKeyIdentifier=keyid