summaryrefslogtreecommitdiffstats
path: root/x509.genkey
diff options
context:
space:
mode:
authorJosh Boyer <jwboyer@redhat.com>2012-09-25 12:02:24 -0400
committerJosh Boyer <jwboyer@redhat.com>2012-09-25 13:22:04 -0400
commitf0f4ff23f140d044d079b021da98d819b910f0f9 (patch)
tree63df63dfdf530304cba44d78a4aa821dfc150fe3 /x509.genkey
parent7e6e483520994df2dfc131a0d87305da663e61c5 (diff)
downloadkernel-f0f4ff23f140d044d079b021da98d819b910f0f9.tar.gz
kernel-f0f4ff23f140d044d079b021da98d819b910f0f9.tar.xz
kernel-f0f4ff23f140d044d079b021da98d819b910f0f9.zip
Switch to using modsign-post-KS upstream with x509 certs
Diffstat (limited to 'x509.genkey')
-rw-r--r--x509.genkey16
1 files changed, 16 insertions, 0 deletions
diff --git a/x509.genkey b/x509.genkey
new file mode 100644
index 000000000..2f90e1bce
--- /dev/null
+++ b/x509.genkey
@@ -0,0 +1,16 @@
+[ req ]
+default_bits = 4096
+distinguished_name = req_distinguished_name
+prompt = no
+x509_extensions = myexts
+
+[ req_distinguished_name ]
+O = Fedora
+CN = Fedora kernel signing key
+emailAddress = kernel-team@fedoraproject.org
+
+[ myexts ]
+basicConstraints=critical,CA:FALSE
+keyUsage=digitalSignature
+subjectKeyIdentifier=hash
+authorityKeyIdentifier=keyid