goauth-keygen

Overview ¶

Command goauth-keygen generates Ed25519 signing keypairs and key fingerprints (kid values) for goAuth JWT key provisioning and rotation.

Usage:

goauth-keygen                     generate a keypair (base64 raw keys)
goauth-keygen -pem                generate a keypair (PKCS#8/PKIX PEM)
goauth-keygen -fingerprint FILE   print the kid of an existing public key
                                  (PEM, raw, or base64 file)

See docs/ops.md for the full key-rotation ceremony.