1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
|
# nk - Nkeys utility program
[](https://www.apache.org/licenses/LICENSE-2.0)
## SYNOPSIS
```bash
nk [-gen type] [-sign file] [-verify file] [-inkey keyfile] [-pubin keyfile] [-pubout] [-e entropy]
```
## DESCRIPTION
The nk utility program can be used to generate nkeys, signing, and verify signatures.
## COMMAND OPTIONS
-gen type
Used to create an Nkey Seed of a given type. Type can be **User**, **Account**, **Server**, **Cluster**, or **Operator**
-sign file
Used to sign the contents of file. -inkey is also required.
-verify file -sigfile sig
Used to verify a file with a given signature. -inkey or -pubin also required.
## Examples
Create a user keypair. The result will be an encoded seed. Seeds are prefixed with an 'S', and followed by the type, e.g. U = user.
```bash
> nk -gen user > user.seed
> cat user.seed
SUAKYRHVIOREXV7EUZTBHUHL7NUMHPMAS7QMDU3GTIUWEI5LDNOXD43IZY
```
You can obtain the public key for an nkey seed as follows.
```bash
> nk -inkey user.seed -pubout > user.pub
> cat user.pub
UD466L6EBCM3YY5HEGHJANNTN4LSKTSUXTH7RILHCKEQMQHTBNLHJJXT
```
Signing the contents of a file
```bash
> cat > some.txt
Hello World!
> nk -sign some.txt -inkey user.seed > some.sig
> cat some.sig
0CK1XmkxNfUGfudxliWTWeoETgIo23m9qowS9yTfYFSrjR8HgAW63jQ3NxPU_jG38hZPW61IZSun37N690CkDg
```
Verifying a signature. You can use the seed or the public key.
```bash
> nk -verify some.txt -sigfile some.sig -inkey user.seed
Verified OK
> nk -verify some.txt -sigfile some.sig -pubin user.pub
Verified OK
```
## License
Unless otherwise noted, the NATS source files are distributed
under the Apache Version 2.0 license found in the LICENSE file.
|
