[ req ] | |
default_bits = 3072 | |
distinguished_name = req_distinguished_name | |
prompt = no | |
x509_extensions = myexts | |
[ req_distinguished_name ] | |
O = Rocky | |
CN = Rocky kernel signing key | |
emailAddress = security@rockylinux.org | |
[ myexts ] | |
basicConstraints=critical,CA:FALSE | |
keyUsage=digitalSignature | |
subjectKeyIdentifier=hash | |
authorityKeyIdentifier=keyid |