3c560c6
[ req ]
3c560c6
default_bits = 3072
3c560c6
distinguished_name = req_distinguished_name
3c560c6
prompt = no
3c560c6
x509_extensions = myexts
3c560c6
3c560c6
[ req_distinguished_name ]
3c560c6
O = Red Hat
3c560c6
CN = Red Hat Enterprise Linux kernel signing key
3c560c6
emailAddress = secalert@redhat.com
3c560c6
3c560c6
[ myexts ]
3c560c6
basicConstraints=critical,CA:FALSE
3c560c6
keyUsage=digitalSignature
3c560c6
subjectKeyIdentifier=hash
3c560c6
authorityKeyIdentifier=keyid