jose-jwk-pub1
Cleans private keys from a jwk
Usage
jose jwk
pub
-i
JWK
[-o
JWK]
Overview
The jose jwk pub command removes all private key material from one or more JWK(Set) inputs. The output will contain only public key material.
If the JWK contains the "key_ops" property, it will be automatically adjusted to include only operations relevant to public keys.
Options
• -i JSON, --input=JSON : Parse JWK(Set) from JSON
• -i FILE, --input=FILE : Read JWK(Set) from FILE
• -i -, --input=- : Read JWK(Set) from standard input
• -o FILE, --output=FILE : Write JWK(Set) to FILE
• -o -, --output=- : Write JWK(Set) to standard input
• -s, --set : Always output a JWKSet
Examples
Clean private key material from a JWK:
$ jose jwk gen -i '{"alg":"ES256"}' -o prv.jwk
$ cat prv.jwk
{"alg":"ES256","crv":"P-256","key_ops":["sign","verify"],"kty":"EC", ...}
$ jose jwk pub -i prv.jwk -o pub.jwk
$ cat pub.jwk
{"alg":"ES256","crv":"P-256","key_ops":["verify"],"kty":"EC", ...}
Releases
5 releases since Debian 10 (Buster); the text changed 3 times.
--input until Debian 11 (Bullseye);
--output until Debian 11 (Bullseye);
--set until Debian 11 (Bullseye);
-i until Debian 11 (Bullseye);
-o until Debian 11 (Bullseye);
-s until Debian 11 (Bullseye).