jose-jwk-thp1
Calculates the jwk thumbprint
Usage
jose jwk
thp
-i
JWK
[-H
ALG]
[-o
THP]
Overview
The jose jwk thp command calculates the thumbprint of one or more JWKs.
Options
• -i JSON, --input=JSON : Parse JWK(Set) from JSON
• -i FILE, --input=FILE : Read JWK(Set) from FILE
• -i -, --input=- : Read JWK(Set) standard input
• -a ALG, --algorithm=ALG : Use the specified hash algorithm (case sensitive)
• -a ?, --algorithm=? : List available hash algorithms
• -o FILE, --output=FILE : Write thumbprint(s) to FILE
• -o -, --output=- : Write thumbprint(s) to standard input
• -f THP, --find=THP : Search input keys for JWK with the given thumbprint
Examples
Calculate the S1 thumbprint of a newly generated key:
$ jose jwk gen -i '{"alg":"ES256"}' -a S1 | jose jwk thp -i-
BzmSH6W8a8LlbQ1mD0iBJdYj4x4
Calculate the S256 thumbprints of a JWKSet containing two keys:
$ jose jwk thp -i keys.jwkset -a S256 6HJwXEuRh8gAkTz4BodEvcEj_KXkgjc-7Qez3d4VNMs jo_j_O5gqYpKcZKHPp3miTszAeV60MXHvdb_kkjjTWE
Find the input key with the given thumbprint:
$ jose jwk thp -i keys.jwkset -f HYRNOxxOOHap0amTONoy1bHnS5M -o key.jwk
Releases
5 releases since Debian 10 (Buster); the text changed 3 times.
--algorithm until Debian 11 (Bullseye);
--find until Debian 11 (Bullseye);
--input until Debian 11 (Bullseye);
--output until Debian 11 (Bullseye);
-a until Debian 11 (Bullseye);
-f until Debian 11 (Bullseye);
-i until Debian 11 (Bullseye);
-o until Debian 11 (Bullseye).