Function createAction

command/crypto/jwk/create.go:390–600

(ctx *cli.Context)

}

func createAction(ctx *cli.Context) (err error) {
	// require public and private files
	if err := errs.NumberOfArguments(ctx, 2); err != nil {
		return err
	}

	// Use password to protect private JWK by default
	usePassword := true
	passwordFile := ctx.String("password-file")
	if ctx.Bool("no-password") {
		if passwordFile != "" {
			return errs.IncompatibleFlag(ctx, "no-password", "password-file")
		}
		if ctx.Bool("insecure") {
			usePassword = false
		} else {
			return errs.RequiredInsecureFlag(ctx, "no-password")
		}
	}

	pubFile := ctx.Args().Get(0)
	privFile := ctx.Args().Get(1)
	if pubFile == privFile {
		return errs.EqualArguments(ctx, "public-jwk-file", "private-jwk-file")
	}

	// Read password if necessary
	var password string
	if passwordFile != "" {
		password, err = utils.ReadStringPasswordFromFile(passwordFile)
		if err != nil {
			return err
		}
	}

	kty := ctx.String("kty")
	crv := ctx.String("crv")
	alg := ctx.String("alg")
	use := ctx.String("use")
	kid := ctx.String("kid")
	size := ctx.Int("size")
	pemFile := ctx.String("from-pem")

	switch kty {
	case "EC":
		if ctx.IsSet("size") {
			return errs.IncompatibleFlag(ctx, "size", "--kty EC")
		}
	case "RSA":
		if ctx.IsSet("crv") {
			return errs.IncompatibleFlag(ctx, "crv", "--kty RSA")
		}
		// If size is not set it will use a safe default
		if ctx.IsSet("size") {
			minimalSize := keyutil.MinRSAKeyBytes * 8
			if size < minimalSize && !ctx.Bool("insecure") {
				return errs.MinSizeInsecureFlag(ctx, "size", strconv.Itoa(minimalSize))
			}