NAME

       jose-jwk-pub - Cleans private keys from a JWK

SYNOPSIS

       jose jwk pub -i JWK [-o JWK]

OVERVIEW

       The  jose  jwk  pub command removes all private key material from one or more JWK(Set) inputs. The output
       will contain only public key material.

       If the JWK contains the "key_ops" property, it will be automatically adjusted to include only  operations
       relevant to public keys.

OPTIONS

       -i JSON, --input=JSON
              Parse JWK(Set) from JSON

       -i FILE, --input=FILE
              Read JWK(Set) from FILE

       -i -, --input=-
              Read JWK(Set) from standard input

       -o FILE, --output=FILE
              Write JWK(Set) to FILE

       -o -, --output=-
              Write JWK(Set) to standard input

       -s, --set
              Always output a JWKSet

EXAMPLES

       Clean private key material from a JWK:

           $ jose jwk gen -i ´{"alg":"ES256"}´ -o prv.jwk
           $ cat prv.jwk
           {"alg":"ES256","crv":"P-256","key_ops":["sign","verify"],"kty":"EC", ...}
           $ jose jwk pub -i prv.jwk -o pub.jwk
           $ cat pub.jwk
           {"alg":"ES256","crv":"P-256","key_ops":["verify"],"kty":"EC", ...}

AUTHOR

       Nathaniel McCallum <npmccallum@redhat.com>

SEE ALSO

       jose-alg(1),   jose-jwe-enc(1),   jose-jwk-exc(1),   jose-jwk-gen(1),  jose-jwk-thp(1),  jose-jwk-use(1),
       jose-jws-ver(1)

                                                    June 2017                                    JOSE-JWK-PUB(1)