Provided by: node-sshpk_1.13.1+dfsg-1_all bug




       sshpk-conv - convert between key formats


       sshpk-conv -t FORMAT [FILENAME] [OPTIONS...]

       sshpk-conv -i [FILENAME] [OPTIONS...]


       Reads  in  a public or private key and converts it between different formats, particularly
       formats used in the SSH protocol and the well-known PEM PKCS#1/7 formats.

       In the second form, with the -i option given,  identifies  a  key  and  prints  to  stderr
       information about its nature, size and fingerprint.


       Assume the following SSH-format public key in

         ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTI...9M/4c4= user@host

       Identify it with -i:

         $ sshpk-conv -i
         id_ecdsa: a 256 bit ECDSA public key
         ECDSA curve: nistp256
         Comment: user@host

       Convert it to pkcs8 format, for use with e.g. OpenSSL:

         $ sshpk-conv -t pkcs8 id_ecdsa
         -----BEGIN PUBLIC KEY-----

         -----END PUBLIC KEY-----
       Retrieve the public half of a private key:

         $ openssl genrsa 2048 | sshpk-conv -t ssh -c foo@bar
         ssh-rsa AAAAB3NzaC1yc2EAAA...koK7 foo@bar

       Convert  a private key to PKCS#1 (OpenSSL) format from a new-style OpenSSH key format (the
       ssh-keygen -o format):

         $ ssh-keygen -o -f foobar
         $ sshpk-conv -p -t pkcs1 foobar
         -----BEGIN RSA PRIVATE KEY-----

         -----END RSA PRIVATE KEY-----


       -i, --identify
         Instead of converting the key, output identifying information about it to
         stderr, including its type, size and fingerprints.

       -p, --private
         Treat the key as a private key instead of a public key (the default). If you
         supply sshpk-conv with a private key and do not give this option, it will
         extract only the public half of the key from it and work with that.

       -f PATH, --file=PATH
         Input file to take the key from instead of stdin. If a filename is supplied
         as a positional argument, it is equivalent to using this option.

       -o PATH, --out=PATH
         Output file name to use instead of stdout.

       -T FORMAT, --informat=FORMAT

       -t FORMAT, --outformat=FORMAT
         Selects the input and output formats to be used (see FORMATS, below).

       -c TEXT, --comment=TEXT
         Sets the key comment for the output file, if supported.


       Currently supported formats:

       pem, pkcs1
         The standard PEM format used by older OpenSSH and most TLS libraries such as
         OpenSSL. The classic id_rsa file is usually in this format. It is an ASN.1
         encoded structure, base64-encoded and placed between PEM headers.

         The SSH public key text format (the format of an file). A single
         line, containing 3 space separated parts: the key type, key body and optional
         key comment.

         A newer PEM format, usually used only for public keys by TLS libraries such
         as OpenSSL. The ASN.1 structure is more generic than that of pkcs1.

         The new ssh-keygen -o format from OpenSSH. This can be mistaken for a PEM
         encoding but is actually an OpenSSH internal format.

         The internal binary format of keys when sent over the wire in the SSH
         protocol. This is also the format that the ssh-agent uses in its protocol.


       ssh-keygen(1), openssl(1)


       Encrypted (password-protected) keys are not supported.

       Report bugs at Github

                                          December 2017                              SSHPK-CONV()