mirror of
https://github.com/TECHNOFAB11/jwt-authorizer.git
synced 2025-12-12 08:00:07 +01:00
Allow creating authorizer from JWKS files similar to other static certificates. Signed-off-by: Sjoerd Simons <sjoerd@collabora.com>
765 B
765 B
Key generation
RSA
openssl genrsa -out rsa-private2.pem 1024 openssl rsa -in rsa-private2.pem -out rsa-public2.pem -pubout -outform PEM
EC (ECDSA) - (algorigthm ES256 - ECDSA using SHA-256)
curve name: prime256v1 (secp256r1, secp384r1)
openssl ecparam -genkey -noout -name prime256v1 | openssl pkcs8 -topk8 -nocrypt -out ec-private.pem
openssl ec -in ec-private.pem -pubout -out ec-public-key.pem
EdDSA - Edwards-curve Digital Signature Algorithm
(Ed25519 - EdDSA signature scheme using SHA-512 (SHA-2) and Curve25519)
openssl genpkey -algorithm ed25519
JWK - combined file of above keys
rnbyc -j -f rsa-public1.pem -k rsa01 -a RS256 -f ecdsa-public1.pem -k ec01 -a ES256 -f ed25519-public1.pem -k ed01 -a EdDSA -o public1.jw