RNBYC(1)

💖 RNBYC 💖

okay bestie, welcome to your new fave manual page. this one lives in User Commands (section 1 of the manual, iykyk), so you already know it's a command-line girlie. let's get into it ✨

---

🌸 NAME 🌸

rnbyc — JWK and JWT parser and generator

literally that's the whole vibe. parsing, generating, slaying.

---

🎀 DESCRIPTION 🎀

so rnbyc is a JWK/JWKS parser and generator, a JWT parser and serializer, and it also supports signed, encrypted and nested JWTs. yes she does it all. main character energy fr fr.

Version 1.1.8 — that's the one we're on, periodt.

---

👑 COPYRIGHT 👑

Copyright 2020-2022 Nicolas Mora <mail@babelouest.org>

This program is free software; you can redistribute it and/or modify it under the terms of the GPL 3.

---

💅 Command-line options 💅

okay here's the part you actually came for. every single one, no skips, we don't gatekeep here 🫶

• -j, --jwks — Action: JWKS. parse or generate keys and output JWKS.
• -g, --generate <type> — generate a key pair or a symmetric key of <type>. the values available are: RSA[key size] (default key size: 4096), EC256, EC384, EC521, Ed25519, Ed448, X25519, X448, oct[key size] (default key size: 128 bits).
• -i, --stdin — reads the key to parse from stdin.
• -f, --in-file — reads the key to parse from a file.
• -k, --key-id — specifies the key-id to add to the current key.
• -a, --alg — Action: JWKS — specifies the alg value to add to the current key. Action: Serialize — specifies the alg value to sign the token.
• -e, --enc — specifies the enc value to encrypt the token (default A128CBC).
• -l, --enc-alg — specifies the encryption algorithm for key management of the token.
• -o, --out-file — specifies the output file for the private keys (or all the keys if no public file is specified) in the JWKS.
• -p, --out-file-public — specifies the output file for the public keys in the JWKS.
• -n, --indent — JWKS output spaces indentation: 0 is compact mode, default is 2 spaces indent.
• -F, --format — output format, the values available are JWK (default), PEM or DER.
• -x, --split — split JWKS output in public and private keys.
• -t, --parse-token — Action: Parse token.
• -s, --serialize-token — Action: serialize given claims in a token.
• -H, --header — display the header of a parsed token.
• -C, --claims — display the claims of a parsed token, default true.
• -P, --public-key — specifies the public key for key management encryption or signature verification. the public key must be in JWKS format and can be either a JWKS string or a path to a JWKS file.
• -K, --private-key — specifies the private key for key management decryption or signature generation. the public key must be in JWKS format and can be either a JWKS string or a path to a JWKS file.
• -S, --self-signed — verifies the JWT signature if the signed JWT has its public key included in its header as a 'jwk', 'x5c' or 'x5u' parameter.
• -W, --password — specifies the password for key management encryption/decryption using PBES2 alg, or signature generation/verification using HS alg.
• -u, --x5u-flags — set x5u flags to retrieve online certificate. the values available are:
  • cert: ignore server certificate errors (self-signed, expired, etc.)
  • follow: follow jwks_uri redirection if any

values can be concatenated, e.g. --x5u-flags cert,follow

• -v, --version — print rnbyc's current version.
• -h, --help — print this message.
• -d, --debug — display debug messages.

---

🦋 SEE ALSO 🦋

The full documentation for rnbyc is maintained as a Texinfo manual. If the info and rnbyc programs are properly installed at your site, the command

info rnbyc

should give you access to the complete manual. go read it bestie, she's thorough 💜

---

and that's the whole page!! this is rnbyc 1.1.8, from September 2023, and the manual page itself is titled RNBYC(1). mwah 💋 thanks for reading, ily, go encrypt something 🎀✨