Skip to content

Unsupported key type using rsa-pss #546

Closed
@jonasf21

Description

@jonasf21

Version(s) affected

3.3.4

Description

A key created with openssl using rsa-pss and 4096 bits with sigopt rsa_pss_saltlen:32 seems to be unsupported while PS256 and HS256 is stated as supported. Loading the key results in:
PHP Fatal error: Uncaught InvalidArgumentException: Unsupported key type in vendor/web-token/jwt-framework/src/Library/KeyManagement/KeyConverter/KeyConverter.php:254

How to reproduce

Create a private key like this:

openssl req -newkey rsa-pss -new -nodes -x509 -days 3650 -pkeyopt rsa_keygen_bits:4096 -sigopt rsa_pss_saltlen:32 -keyout key.pem -out cert.pem

Use the key within the framework:

$key = JWKFactory::createFromKeyFile(
'/key.pem', // The filename
null, // Secret if the key is encrypted, otherwise null
// [
// 'use' => 'sig', // Additional parameters
// ]
);

Possible Solution

No response

Additional Context

No response

Metadata

Metadata

Assignees

Labels

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions