From f0f4ff23f140d044d079b021da98d819b910f0f9 Mon Sep 17 00:00:00 2001
From: Josh Boyer <jwboyer@redhat.com>
Date: Tue, 25 Sep 2012 12:02:24 -0400
Subject: Switch to using modsign-post-KS upstream with x509 certs

---
 x509.genkey | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)
 create mode 100644 x509.genkey

(limited to 'x509.genkey')

diff --git a/x509.genkey b/x509.genkey
new file mode 100644
index 000000000..2f90e1bce
--- /dev/null
+++ b/x509.genkey
@@ -0,0 +1,16 @@
+[ req ]
+default_bits = 4096
+distinguished_name = req_distinguished_name
+prompt = no
+x509_extensions = myexts
+
+[ req_distinguished_name ]
+O = Fedora
+CN = Fedora kernel signing key
+emailAddress = kernel-team@fedoraproject.org
+
+[ myexts ]
+basicConstraints=critical,CA:FALSE
+keyUsage=digitalSignature
+subjectKeyIdentifier=hash
+authorityKeyIdentifier=keyid
-- 
cgit