Re: Getting public key from .PEM file for ostree sign verify

[MR ZenWiz <mrzenwiz gmail com>]

That gives me an error:

$ openssl pkey -pubin -outform DER ~/fixture.pem
unable to load Public key
140403801552192:error:0909006C:PEM routines:get_name:no start
line:../crypto/pem/pem_lib.c:745:Expecting: PUBLIC KEY

Also gets this error if I add -pubout to the end.

Thanks.

Mark

On Tue, Jul 20, 2021 at 2:30 PM Dan Nicholson <dbn endlessos org> wrote:
> On Tue, Jul 20, 2021 at 2:42 PM MR ZenWiz via ostree-list
> <ostree-list gnome org> wrote:
> > I have been digging around to find out how to do this, but it appears
> > all the methods I've seen so far produce text-converted keys.
> >
> > How do I extract the binary public key from a .pem file so I can use
> > ostree sign to verify the signature in the commitmeta?
>
> I've never actually used ostree sign, but presumably you just want the
> DER encoding of it:
>
> openssl pkey -pubin -outform DER -in key.pem
>
> --
> Dan