KEY2JWK(1) LibJWT C Library KEY2JWK(1) NAME key2jwk - Generate a JSON Web Key Set SYNOPSIS key2jwk [options] <FILE> [FILE]... DESCRIPTION key2jwk Generates a JSON Web Key Set from one or more keys in PEM or DER format. This program will parse PEM/DER key files (public and private) into JSON Web Keys and output a JWK Set. Note that HMAC keys are guessed based on them not being parsed as a PEM or DER key. This may cause some issues. You can disable this with the -m option. HS256, HS384, and HS512 are assumed based on the key size and are expected to be a file with binary data. Using file size in bytes: HS256: size >= 32 AND size < 48 HS384: size >= 48 AND size < 64 HS512: size >= 64 The -o options is required for output. If the file exists, it will not be overwritten. You can use --output - to write to stdout. If you write to stdout, all other messages will be written to stderr. RSA keys will not have an algorithm set as they are valid for RS256, RS384, and RS512, however, RSA-PSS keys will be set to PS256, since otherwise they will look no different than an RSA key. RSA keys must be at least 1024 bits. Private keys will have sign added to the key_ops array while public keys will have the use attribute set to sig. All keys will get a generated kid attribute (the RFC 7638 JWK SHA-256 thumbprint, which is deterministic) unless you use the -k option. Example output: $ key2jwk -q -o - eddsa_key_ed25519.pem { "libjwt.io:comment": "Generated by LibJWT 2.9.99", "libjwt.io:date": "Sun Jan 12 23:50:24 2025", "libjwt.io:hostname": "maClara.local", "keys": [ { "key_ops": [ "sign" ], "kty": "OKP", "crv": "Ed25519", "alg": "EdDSA", "x": "HUj-14kN6N4i5qNVkfEhwKiCf-tSrvRHstQdtV8a5QM", "d": "XY5oUZqGWVZhX7J09hG-rRnAKXiw1g_aBh-Bc52KZ_Y", "kid": "yP8YONwTmFovdfeOfp9y5u_lxzP7Y3JAmpUgeNnXFS8" } ] } Options -h, --help Show common options and quit. -l, --list List all supported algorithms that can be passed to the -a option and quit. -q, --quiet Do not output anything except for hard errors (and the JWKS). -k, --disable-kid Disable generating kid attribute. -m, --disable-hmac Disable falling back to HMAC for key files that cannot be read as PEM or DER. -o FILE, --output=FILE Use FILE to write the JWKS. Use - to write to stdout. BUGS See GitHub Issues: https://github.com/benmcollins/libjwt/issues AUTHOR key2jwk written by Ben Collins bcollins@libjwt.io. SEE ALSO jwt-verify(1), jwt-generate(1), jwk2key(1) key2jwk User Manual KEY2JWK(1)
NAME | SYNOPSIS | DESCRIPTION | BUGS | AUTHOR | SEE ALSO
Want to link to this manual page? Use this URL:
<https://man.freebsd.org/cgi/man.cgi?query=key2jwk&sektion=1&manpath=FreeBSD+Ports+15.1.quarterly>