[ req ] | |
default_bits = 3072 | |
distinguished_name = req_distinguished_name | |
prompt = no | |
x509_extensions = myexts | |
[ req_distinguished_name ] | |
O = CentOS | |
CN = CentOS Linux kernel signing key | |
emailAddress = security@centos.org | |
[ myexts ] | |
basicConstraints=critical,CA:FALSE | |
keyUsage=digitalSignature | |
subjectKeyIdentifier=hash | |
authorityKeyIdentifier=keyid |