d0a82f1
[ req ]
d0a82f1
default_bits = 3072
d0a82f1
distinguished_name = req_distinguished_name
d0a82f1
prompt = no
d0a82f1
x509_extensions = myexts
d0a82f1
d0a82f1
[ req_distinguished_name ]
d0a82f1
O = Red Hat
d0a82f1
CN = Red Hat Enterprise Linux kernel signing key
d0a82f1
emailAddress = secalert@redhat.com
d0a82f1
d0a82f1
[ myexts ]
d0a82f1
basicConstraints=critical,CA:FALSE
d0a82f1
keyUsage=digitalSignature
d0a82f1
subjectKeyIdentifier=hash
d0a82f1
authorityKeyIdentifier=keyid