[Openid-specs-ab] Keys used in Standard examples

Justin Richer jricher at mitre.org
Tue Jun 4 17:11:39 UTC 2013


FWIW, I've built a utility program that uses the Nimbus-JOSE-JWT library 
to generate public and private keys, and it prettyprints the resulting 
keys to the console:

https://github.com/mitreid-connect/json-web-key-generator

  -- Justin

On 06/03/2013 05:06 PM, Edmund Jay wrote:
> Hi Mike,
>
> I've attached the JWKs for the private keys used by the client and the 
> server for signing.
> client.jwk is used by the client in section 2.2.2.2
> server.jwk is used by the server in sectino 2.2.6.1
>
> The public JWK key listed in section 2.2.6.1 is used to validate the  
> ID Token instead of the Request Object.
>
> BTW, the JWK's are generated using Nimbus-JOSE-JWT library since I 
> don't have one that supports private keys yet.
>
>
>
> -- Edmund
>
> ------------------------------------------------------------------------
> *From:* Mike Jones <Michael.Jones at microsoft.com>
> *To:* Edmund Jay <ejay at mgi1.com>
> *Cc:* "openid-specs-ab at lists.openid.net" 
> <openid-specs-ab at lists.openid.net>
> *Sent:* Mon, June 3, 2013 8:13:00 AM
> *Subject:* Keys used in Standard examples
>
> Hi Edmund,
>
> Can you please send us the keys used to sign the ID Tokens in the 
> examples in Standard 2.2.6.1?  If you have all the parts of the 
> private key, please send them -- not just "d", but also "p", "q", 
> "dp", dq", and "qi".  Likewise, please send the full private key 
> information for the keys used to sign the requests in 2.2.2.2 and 2.2.6.1.
>
> Also, can you confirm that the key used in 2.2.6.1 is the one used to 
> sign the requests, and not the one used to sign the ID tokens?
>
> Thanks,
>
> -- Mike
>
>
>
> _______________________________________________
> Openid-specs-ab mailing list
> Openid-specs-ab at lists.openid.net
> http://lists.openid.net/mailman/listinfo/openid-specs-ab

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-ab/attachments/20130604/3af4e3a2/attachment.html>


More information about the Openid-specs-ab mailing list