af29e1
[ req ]
af29e1
default_bits = 3072
af29e1
distinguished_name = req_distinguished_name
af29e1
prompt = no
af29e1
x509_extensions = myexts
af29e1
af29e1
[ req_distinguished_name ]
de74bf
O = Red Hat
de74bf
CN = Red Hat Enterprise Linux kernel signing key
de74bf
emailAddress = secalert@redhat.com
af29e1
af29e1
[ myexts ]
af29e1
basicConstraints=critical,CA:FALSE
af29e1
keyUsage=digitalSignature
af29e1
subjectKeyIdentifier=hash
af29e1
authorityKeyIdentifier=keyid