[pkix] Converting JWK <-> PEM

Anders Rundgren <anders.rundgren.net@gmail.com> Sat, 30 January 2021 05:49 UTC

Return-Path: <anders.rundgren.net@gmail.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B8AC73A0BF0 for <pkix@ietfa.amsl.com>; Fri, 29 Jan 2021 21:49:37 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id A-0s_4h7y1XF for <pkix@ietfa.amsl.com>; Fri, 29 Jan 2021 21:49:35 -0800 (PST)
Received: from mail-ej1-x62c.google.com (mail-ej1-x62c.google.com [IPv6:2a00:1450:4864:20::62c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B10E73A0BEF for <pkix@ietf.org>; Fri, 29 Jan 2021 21:49:35 -0800 (PST)
Received: by mail-ej1-x62c.google.com with SMTP id kg20so16129765ejc.4 for <pkix@ietf.org>; Fri, 29 Jan 2021 21:49:35 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:references:to:from:message-id:date:user-agent:mime-version :in-reply-to:content-language:content-transfer-encoding; bh=3u+7EZI/L64y8y5bd3mqJ0XND5gwTGe74a/OsYsof6U=; b=TpBk4v/Z67+TWis8nYRAYAZARd9ttorYfy+ep0FS+gO4MRVPBnmkb95p+PEiKpFgiT VrQyigKte35StXhZqqMX9hAUh6nJbtqKPN+ITylKbNQBMbiv2J2+gUoHnPnkf1hyDZZI flLZDVFur9b1xMCaGVrliRO4xllwzB16Lc+6c4XcWGalGTUlY99ZjV1VHEajj/AiHcbR kTCVZAzr53BCzv3vKlXd+DVCwU7NfbnjaGYnSHuDo80KD4PjnrRuvsNnxWJVM9CWboSh lrtGFUDSDQ8UWcWA2ID+RR40NRQ+KN7fUaLDrOdVPhPbwn6FcWb557xIjBjtbNyMPxZe ioWA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:references:to:from:message-id:date :user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=3u+7EZI/L64y8y5bd3mqJ0XND5gwTGe74a/OsYsof6U=; b=LHQHP+chHj3yvVUvPX4ocbGZ1XNizzGc6DYImi54y8WkaIyv5LpGXh5ElmwbZSUYrh MKjtsVlHFhCU/HVXblr3zlAFSUdSZt2hdHTFLSSIjUONJEY+sp9/AyUqrEzZIhi8bIbW dfIVSrmXNJNkfevJodWyHvrhtZS3puCCJ16z4oiYDFKQTM+MJPYzFcJFXttelZelHc7a BnVW2MdaPqv3VfZxpbX0I9WYJNsbrOsXcrk+7SREpvxBlfvKlWnfypTJWORTISahZTDh VQ6SUcv1ptq+9b5IULFEq+2APgq8j1oJ6MBitMm2K4CHsveqLJAgvRHFo7eNohUxTT6L ZLjQ==
X-Gm-Message-State: AOAM532h0d+lg6CTEi5or17mHVuzUJDcd3lhKCypjGUGIQFbE6pwT1mk hM6cS9RgyL/vBGIcQ9R1L4Uy2+4+v94=
X-Google-Smtp-Source: ABdhPJxUSGEd2ViLKgIbpflX7SzHFBv9MjxcyyEO71E0eTOaSjAcyoAQZ8Cwp6Efxn1jIaGsa5oqyw==
X-Received: by 2002:a17:906:796:: with SMTP id l22mr7801390ejc.247.1611985773557; Fri, 29 Jan 2021 21:49:33 -0800 (PST)
Received: from [192.168.1.79] (25.131.146.77.rev.sfr.net. [77.146.131.25]) by smtp.googlemail.com with ESMTPSA id o10sm4805587eju.89.2021.01.29.21.49.32 for <pkix@ietf.org> (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Fri, 29 Jan 2021 21:49:32 -0800 (PST)
References: <ba81698a-216a-e20e-a5a9-d5862d192c84@gmail.com>
To: "pkix@ietf.org" <pkix@ietf.org>
From: Anders Rundgren <anders.rundgren.net@gmail.com>
X-Forwarded-Message-Id: <ba81698a-216a-e20e-a5a9-d5862d192c84@gmail.com>
Message-ID: <1efe1ff6-b6cc-404a-696d-89976c297654@gmail.com>
Date: Sat, 30 Jan 2021 06:49:31 +0100
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:78.0) Gecko/20100101 Thunderbird/78.7.0
MIME-Version: 1.0
In-Reply-To: <ba81698a-216a-e20e-a5a9-d5862d192c84@gmail.com>
Content-Type: text/plain; charset="utf-8"; format="flowed"
Content-Language: en-US
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/pkix/_lAxRGQdAGkDws7vKieBpBwfjIA>
Subject: [pkix] Converting JWK <-> PEM
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/pkix/>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 30 Jan 2021 05:49:38 -0000

Hi PKIX,

It is a true pleasure dealing with PKIX standards since there always seem to be several standards for doing the same thing :-(

Representation of private keys is one such item where the public counterpart sometimes (and for some algorithms only...) is absent. I'm happy that the latter was properly addressed by JWK.

FWIW, I have just updated the on-line JWS/CT [*] verifier with a JWK<->PEM conversion utility: https://mobilepki.org/jws-ct/keyconv

thanx,
Anders

*] https://tools.ietf.org/id/draft-jordan-jws-ct-02.html