Apr 01, 2020 Generate a new private key and Certificate Signing Request. Openssl req -out CSR.csr -new -newkey rsa:2048 -nodes -keyout private.key Generate a self-signed certificate. Openssl req -x509 -sha256 -nodes -days 365 -newkey rsa:2048 -keyout private.key -out certificate.crt Generate a certificate signing request (CSR) for an existing private key.
How to generate keys in PEM formatusing the OpenSSL command line tools?
RSA keys
The JOSE standard recommends a minimum RSA key size of 2048 bits.
To generate a 2048-bit RSA private + public key pair for use in RSxxx and PSxxxsignatures:
Elliptic Curve keys
To generate an EC key pair the curve designation must be specified. Note thatJOSE ESxxx signatures require P-256, P-384 and P-521 curves (see theircorresponding OpenSSL identifiers below).
Elliptic Curve private + public key pair for use with ES256 signatures:
Elliptic Curve private + public key pair for use with ES384 signatures:
Elliptic Curve private + public key pair for use with ES512 signatures:
PEM key parsing in Java
The BouncyCastle library provides a simpleutility to parse PEM-encoded keys in Java, to use them for JWS or JWE later.
For Maven you should include the following BouncyCastle dependencies (where1.52 is the latest stable version as of May 2015):
Generate 2048 Bit Rsa Key Openssl Free
Generate 2048 Bit Rsa Public Key
Example parsing of an PEM-encoded EC key in Java: