Skip to article frontmatterSkip to article content
Site not loading correctly?

This may be due to an incorrect BASE_URL configuration. See the MyST Documentation for reference.

keycloak_pkey_to_jwks

Convert an RSA private key (base64-encoded DER) into a JWKS (JSON Web Key Set) document suitable for OAuth 2 / JWT providers. The issuer string becomes the key’s kid. The JWKS is printed to stdout. (Source dir: utils/c/pkey_to_jwks.)

Usage

keycloak_pkey_to_jwks --key <base64-der> --issuer <issuer> > jwks.json
OptionPurpose
--keyRSA private key, base64-encoded DER
--issuerIssuer string, used as the JWK kid

See also