d0a82f1
[ req ]
d0a82f1
default_bits = 4096
d0a82f1
distinguished_name = req_distinguished_name
d0a82f1
prompt = no
d0a82f1
x509_extensions = myexts
d0a82f1
d0a82f1
[ req_distinguished_name ]
d0a82f1
O = Fedora
d0a82f1
CN = Fedora kernel signing key
d0a82f1
emailAddress = kernel-team@fedoraproject.org
d0a82f1
d0a82f1
[ myexts ]
d0a82f1
basicConstraints=critical,CA:FALSE
d0a82f1
keyUsage=digitalSignature
d0a82f1
subjectKeyIdentifier=hash
d0a82f1
authorityKeyIdentifier=keyid