liveBook · Manning

OpenSSL

As explained in Secure APIs

OpenSSL is an open-source toolkit implementing cryptographic protocols, algorithms, certificates, and key-management operations.

OpenSSL is an open-source library for SSL and TLS that also provides cryptographic operations such as RSA key generation. For JWTs using asymmetric signatures, it creates a private key for signing and a public key for validation. section 8.2

Generate an RSA key pair

Run `openssl genpkey -algorithm RSA -out private_key.pem -outpubkey public_key.pem -pkeyopt rsa_keygen_bits:3072`. The private key signs PS256 tokens; the public key verifies their signatures. The command selects RSA, names both output files, and sets the key size. section 8.2

openssl genpkey -algorithm RSA -out private_key.pem \
-outpubkey public_key.pem -pkeyopt rsa_keygen_bits:3072

Inspect the complete command used to generate the private and public RSA keys. section 8.2

How Secure APIs covers it

How deep it goes
Explains installation context, genpkey parameters, and key use, but does not develop OpenSSL's broader cryptographic capabilities.
Examples
Uses a 3072-bit RSA key-pair command and generated PEM files for PS256 token signing.
What it assumes
Assumes familiarity with JWT signing roles, while explaining the private/public key distinction and command options.
What you can do after
Operate OpenSSL's genpkey command to create RSA signing and verification keys for JWT experiments.
How it connects
Connects SSL, TLS, RSA, asymmetric signing, public-key validation, JWT, and PS256.
Cover of Secure APIs
liveBookmanning.com
Read Secure APIs on liveBook Get the book at manning.com

Also explained in

Compare how 3 books explain OpenSSL →

Related concepts

This explainer was generated by Manning's knowledge graph from the text of Secure APIs. The section links point to the parts of the book it draws on.