Skip site navigation (1)Skip section navigation (2)

  
 
  

home | help
JWK2KEY(1)			LibJWT C Library		      JWK2KEY(1)

NAME
     jwk2key - Export JSON Web Keys to PKCS8

SYNOPSIS
     jwk2key [options] <FILE> [FILE]...

DESCRIPTION
     jwk2key Takes JSON Web Key files and exports each key to a PKCS8 PEM file

     This  program will parse a JSON Web Key or Set and write out the individual
     files to DIR (by default `.').  Output directory must  exist.   You  should
     make sure the permissions on the output directory are such that they cannot
     be accessed by others.

     JWK  files  must  be  listed after any options.  A - will be interpreted as
     stdin.

     All RSA key types will be written as plain RSA keys,  including  RSASSA-PSS
     keys, unless it has a PS256, PS384, or PS512 alg attribute.

     All  keys	are  written  in PKCS8 PEM format, except key type OCT, which is
     written as a binary file (.bin extension).

     By default, existing files will not be overwritten.  If you use the --retry
     option, an attempt will be made to add -1 to the file name, up to -9, in an
     attempt to create the file.

     Output file naming is based on (hopefully) unique characteristics,  includ-
     ing:

     * Key type E.g.  rsa, ec, etc.

     * Bits in the key.  E.g.  2048 for an RSA key, or 384 for an EC key.

     * Private	vs  Public.   Public keys will have _pub added to the end of the
       filename (before the extension).

     * Most importantly, a stable per-key identifier: the kid attribute  if  the
       key  has one, otherwise its RFC 7638 JWK thumbprint.  This keeps multiple
       keys of the same type that carry no kid from colliding on one file name.

   Options
     -h, --help
	    Show common options and quit.

     -r, --retry
	    Retry if output file exists.

     -d DIR, --dir=DIR
	    Directory to write key files to (default is `.').

BUGS
     See GitHub Issues: https://github.com/benmcollins/libjwt/issues

AUTHOR
     jwk2key written by Ben Collins bcollins@libjwt.io.

SEE ALSO
     jwt-verify(1), jwt-generate(1), key2jwk(1)

jwk2key User Manual						      JWK2KEY(1)

Want to link to this manual page? Use this URL:
<https://man.freebsd.org/cgi/man.cgi?query=jwk2key&sektion=1&manpath=FreeBSD+Ports+15.1.quarterly>

home | help