linux-stable/certs/default_x509.genkey

[ req ]
default_bits = 4096
distinguished_name = req_distinguished_name
prompt = no
string_mask = utf8only
x509_extensions = myexts

[ req_distinguished_name ]
#O = Unspecified company
CN = Build time autogenerated kernel key
#emailAddress = unspecified.user@unspecified.company

[ myexts ]
basicConstraints=critical,CA:FALSE
keyUsage=digitalSignature
subjectKeyIdentifier=hash
authorityKeyIdentifier=keyid
certs: check-in the default x509 config file When x509.genkey is created, it prints a log: Generating X.509 key generation config ..., which is not the ordinary Kbuild log style. Check-in the default config as certs/default_x509.genkey to make it readable, and copy it to certs/x509.genkey if it is not present. The log is shown in the Kbuild style. COPY certs/x509.genkey Signed-off-by: Masahiro Yamada <masahiroy@kernel.org> 2021-11-05 03:59:55 +00:00			`[ req ]`
			`default_bits = 4096`
			`distinguished_name = req_distinguished_name`
			`prompt = no`
			`string_mask = utf8only`
			`x509_extensions = myexts`

			`[ req_distinguished_name ]`
			`#O = Unspecified company`
			`CN = Build time autogenerated kernel key`
			`#emailAddress = unspecified.user@unspecified.company`

			`[ myexts ]`
			`basicConstraints=critical,CA:FALSE`
			`keyUsage=digitalSignature`
			`subjectKeyIdentifier=hash`
			`authorityKeyIdentifier=keyid`