Is there a way to read/load public key string or public key itself from the Apigee keystore?

We have a requirement where the external IDP will sign the JWT using a private key. We will need to verify it using public key within Apigee.

There is no way to read the public key through management APIs. Is there a way to read public key string in Apigee?

Solved Solved
1 2 1,185
1 ACCEPTED SOLUTION

Not applicable

Until now, there was no way to do it. We in the latest release added an API to export the certificate. You can use the certificate data to get the public key.

Here is the API

https://api.enterprise.apigee.com/v1/o/<org name>/e/<env name>/keystores/<keystore name>/certs/<cert name>/export

Save the output as a file - for example - apigee.pem

Following Open SSL command will give you the public key.

openssl x509 -pubkey -noout -in apigee.pem

The API is in beta, I will get this documented soon.

View solution in original post

2 REPLIES 2

Not applicable

Until now, there was no way to do it. We in the latest release added an API to export the certificate. You can use the certificate data to get the public key.

Here is the API

https://api.enterprise.apigee.com/v1/o/<org name>/e/<env name>/keystores/<keystore name>/certs/<cert name>/export

Save the output as a file - for example - apigee.pem

Following Open SSL command will give you the public key.

openssl x509 -pubkey -noout -in apigee.pem

The API is in beta, I will get this documented soon.

I added this API to the doc at:

http://apigee.com/docs/management/apis/get/organiz...

Stephen