f0f4ff2
[ req ]
f0f4ff2
default_bits = 4096
f0f4ff2
distinguished_name = req_distinguished_name
f0f4ff2
prompt = no
f0f4ff2
x509_extensions = myexts
f0f4ff2
f0f4ff2
[ req_distinguished_name ]
f0f4ff2
O = Fedora
f0f4ff2
CN = Fedora kernel signing key
f0f4ff2
emailAddress = kernel-team@fedoraproject.org
f0f4ff2
f0f4ff2
[ myexts ]
f0f4ff2
basicConstraints=critical,CA:FALSE
f0f4ff2
keyUsage=digitalSignature
f0f4ff2
subjectKeyIdentifier=hash
f0f4ff2
authorityKeyIdentifier=keyid