Tcl

Load a Private Key from a JWK

Demonstrates the Chilkat PrivateKey.LoadJwk method, which loads a private key from JWK (JSON Web Key) JSON. The only argument is the JWK JSON string. Supported key types are RSA, EC, and Ed25519 (kty=OKP).

Background: JWK is the JSON key format used throughout modern web security — JWT signing, OAuth, OpenID Connect — so this loader is what you use to consume a key from a JWK Set or an identity provider. A private JWK includes the private parameters (d and, for RSA, the CRT values); a public-only JWK omits them. As JSON in the clear, a private JWK must be handled as sensitive material.

Chilkat Tcl Downloads

Download Chilkat for Tcl

Tcl


load ./chilkat.dll

set success 0

#  Demonstrates the PrivateKey.LoadJwk method, which loads a private key from JWK (JSON Web Key)
#  JSON.  The only argument is the JWK JSON string.  Supported key types are RSA, EC, and
#  Ed25519 (kty=OKP).

set privKey [new_CkPrivateKey]

#  A private JWK.  For a real key, "d" (and the other private parameters) would be present.
set jwk "{\"kty\":\"EC\",\"crv\":\"P-256\",\"x\":\"...\",\"y\":\"...\",\"d\":\"...\"}"

set success [CkPrivateKey_LoadJwk $privKey $jwk]
if {$success == 0} then {
    puts [CkPrivateKey_lastErrorText $privKey]
    delete_CkPrivateKey $privKey
    exit
}

puts "Loaded a [CkPrivateKey_keyType $privKey] private key."

delete_CkPrivateKey $privKey