[Openid-specs-ab] Keys used in Standard examples

Nat Sakimura sakimura at gmail.com
Tue Jun 4 21:23:55 UTC 2013

Nice. Thanks!

2013/06/05 2:13¡¢Justin Richer <jricher at mitre.org> ¤Î¥á¥Ã¥»©`¥¸:

 FWIW, I've built a utility program that uses the Nimbus-JOSE-JWT library
to generate public and private keys, and it prettyprints the resulting keys
to the console:


 -- Justin

On 06/03/2013 05:06 PM, Edmund Jay wrote:

 Hi Mike,

I've attached the JWKs for the private keys used by the client and the
server for signing.
client.jwk is used by the client in section
server.jwk is used by the server in sectino

The public JWK key listed in section is used to validate the  ID
Token instead of the Request Object.

BTW, the JWK's are generated using Nimbus-JOSE-JWT library since I don't
have one that supports private keys yet.

-- Edmund

*From:* Mike Jones <Michael.Jones at microsoft.com><Michael.Jones at microsoft.com>
*To:* Edmund Jay <ejay at mgi1.com> <ejay at mgi1.com>
*Cc:* "openid-specs-ab at lists.openid.net" <openid-specs-ab at lists.openid.net>
<openid-specs-ab at lists.openid.net> <openid-specs-ab at lists.openid.net>
*Sent:* Mon, June 3, 2013 8:13:00 AM
*Subject:* Keys used in Standard examples

 Hi Edmund,

Can you please send us the keys used to sign the ID Tokens in the examples
in Standard  If you have all the parts of the private key, please
send them ¨C not just ¡°d¡±, but also ¡°p¡±, ¡°q¡±, ¡°dp¡±, dq¡±, and ¡°qi¡±.
Likewise, please send the full private key information for the keys used to
sign the requests in and

Also, can you confirm that the key used in is the one used to sign
the requests, and not the one used to sign the ID tokens?


                                                            -- Mike

Openid-specs-ab mailing
listOpenid-specs-ab at lists.openid.nethttp://lists.openid.net/mailman/listinfo/openid-specs-ab

Openid-specs-ab mailing list
Openid-specs-ab at lists.openid.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-ab/attachments/20130605/ce62e303/attachment.html>

More information about the Openid-specs-ab mailing list