1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16
[ req ] default_bits = 4096 distinguished_name = req_distinguished_name prompt = no x509_extensions = myexts [ req_distinguished_name ] O = openEuler CN = openEuler kernel signing key emailAddress = kernel@openeuler.org [ myexts ] basicConstraints=critical,CA:FALSE keyUsage=digitalSignature subjectKeyIdentifier=hash authorityKeyIdentifier=keyid