certs/default_x509.genkey

   1 [ req ]
   2 default_bits = 4096
   3 distinguished_name = req_distinguished_name
   4 prompt = no
   5 string_mask = utf8only
   6 x509_extensions = myexts
   7
   8 [ req_distinguished_name ]
   9 #O = Unspecified company
  10 CN = Build time autogenerated kernel key
  11 #emailAddress = [email protected]
  12
  13 [ myexts ]
  14 basicConstraints=critical,CA:FALSE
  15 keyUsage=digitalSignature
  16 subjectKeyIdentifier=hash
  17 authorityKeyIdentifier=keyid