Skip site navigation (1)Skip section navigation (2)

FreeBSD Manual Pages

  
 
  

home | help
JOSE-JWS-VER(1)						       JOSE-JWS-VER(1)

NAME
       jose-jws-ver - Verifies a JWS using the supplied	JWKs

SYNOPSIS
       jose jws	ver -i JWS [-I PAY] -k JWK [-a]	[-O PAY]

OVERVIEW
       The jose	jws ver	command	verifies a signature over a payload using one
       or more JWKs. When specifying more than one JWK (-k), the program will
       succeed when any	of the provided	JWKs successfully verify a signature.
       Alternatively, if the -a	option is given, the program will succeed only
       when all	JWKs successfully verify a signature.

       If the JWS is a detached	JWS, meaning that the payload is stored	in
       binary form external to the JWS itself, the payload can be loaded using
       the -I parameter.

       Please note that, when specifying the -O	option to output the payload,
       the payload is output whether or	not the	signature validates.
       Therefore, you must check the return value of the command before
       trusting	the data.

OPTIONS
          -i JSON, --input=JSON : Parse JWS from JSON

          -i FILE, --input=FILE : Read	JWS from FILE

          -i -, --input=- : Read JWS from standard input

          -I FILE, --detached=FILE : Read decoded payload from	FILE

          -I -, --detached=- :	Read decoded payload from standard input

          -k FILE, --key=FILE : Read JWK(Set) from FILE

          -k -, --key=- : Read	JWK(Set) from standard input

          -O FILE, --detach=FILE : Decode payload to FILE

          -O -, --detach=- : Decode payload to	standard output

          -a, --all : Ensure the JWS validates	with all keys

EXAMPLES
       Verify a	regular	JWS and	output the payload:

	   $ jose jws ver -i msg.jws -k	key.jwk	-O msg.txt

       Verify a	detached JWS without outputting	the payload:

	   $ jose jws ver -i msg.jws -I	msg.txt	-k key.jwk

       Ensure that a JWS is signed with	all specified keys:

	   $ jose jws ver -i msg.jws -k	ec.jwk -k rsa.jwk -a

AUTHOR
       Nathaniel McCallum <npmccallum@redhat.com>

SEE ALSO
       jose-jws-fmt(1),	jose-jws-sig(1)

				  04/12/2025		       JOSE-JWS-VER(1)

Want to link to this manual page? Use this URL:
<https://man.freebsd.org/cgi/man.cgi?query=jose-jws-ver&sektion=1&manpath=FreeBSD+Ports+14.3.quarterly>

home | help