NAME

       jose-jwk-pub - Cleans private keys from a JWK

SYNOPSIS

       jose jwk pub -i JWK [-o JWK]

OVERVIEW

       The  jose  jwk  pub  command  removes  all  private key material from one or more JWK(Set)
       inputs. The output will contain only public key material.

       If the JWK contains the "key_ops" property, it will be automatically adjusted  to  include
       only operations relevant to public keys.

OPTIONS

       -i JSON, --input=JSON
              Parse JWK(Set) from JSON

       -i FILE, --input=FILE
              Read JWK(Set) from FILE

       -i -, --input=-
              Read JWK(Set) from standard input

       -o FILE, --output=FILE
              Write JWK(Set) to FILE

       -o -, --output=-
              Write JWK(Set) to standard input

       -s, --set
              Always output a JWKSet

EXAMPLES

       Clean private key material from a JWK:

           $ jose jwk gen -i ´{"alg":"ES256"}´ -o prv.jwk
           $ cat prv.jwk
           {"alg":"ES256","crv":"P-256","key_ops":["sign","verify"],"kty":"EC", ...}
           $ jose jwk pub -i prv.jwk -o pub.jwk
           $ cat pub.jwk
           {"alg":"ES256","crv":"P-256","key_ops":["verify"],"kty":"EC", ...}

AUTHOR

       Nathaniel McCallum <npmccallum@redhat.com>

SEE ALSO

       jose-alg(1),    jose-jwe-enc(1),    jose-jwk-exc(1),   jose-jwk-gen(1),   jose-jwk-thp(1),
       jose-jwk-use(1), jose-jws-ver(1)

                                            June 2017                             JOSE-JWK-PUB(1)