config/kernel/x509.genkey

   1 [ req ]
   2 default_bits = 4096
   3 distinguished_name = req_distinguished_name
   4 prompt = no
   5 string_mask = utf8only
   6 x509_extensions = myexts
   7
   8 [ req_distinguished_name ]
   9 O = IPFire.org
  10 CN = Build time autogenerated kernel key
  11 emailAddress = development@lists.ipfire.org
  12
  13 [ myexts ]
  14 basicConstraints=critical,CA:FALSE
  15 keyUsage=digitalSignature
  16 subjectKeyIdentifier=hash
  17 authorityKeyIdentifier=keyid