Generating and adding your JaaS API key

Generating your JaaS API key

Your uploaded public key is used to authenticate generated JWT tokens using the Private Key of the specific key pair. When the Jitsi IFrame connects to your meeting, valid JaaS JWTs enable meeting room connections in the AppID as specified by the roomName value. The Private Key is used to sign the Jitsi JWT.

A JaaS API key is a Public Key consisting of a 4096 bits RSA SSH Key Pair in PEM format. You can generate the Key Pair using the ssh-keygen command and specify rsa as the algorithm, 4096 as the size, and PEM as the format. Refer to ssh-keygen - Generate a New SSH Key for more information about this facility.

Open a terminal window, then use the ssh-keygen command:

> ssh-keygen -t rsa -b 4096 -m PEM -f <filename>

The following shows an example output after running the keygen command:

dev$ssh-keygen -t rsa -b 4096 -m PEM -f jaasauth.key
Generating public/private rsa key pair.
Enter passphrase (empty for no passphrase): 
Enter same passphrase again: 
Your identification has been saved in jaasauth.key.
Your public key has been saved in
The key fingerprint is:
SHA256:aHkvV50wzp6hJ7DB/BTiuzGbh73x3JAnSLhGuxRsyxw dev@dev-machine
The key's randomart image is:
+---[RSA 4096]----+
|                 |
|                 |
|        . . o    |
|       B o + + . |
|      + E o = o  |
|     . * / = +   |
|        #oO B .  |
|       o.Xo* =   |
|        =...o .  |

You must then save the public key in PEM format using the openssl command.

> openssl rsa -in <filename> -pubout -outform PEM -out <filename>.pub

For example:

dev$openssl rsa -in jaasauth.key -pubout -outform PEM -out
writing RSA key

The following is an example of a saved JaaS API (Public) key file:

-----END PUBLIC KEY-----

Uploading your API Key

Once an RSA key is generated and in the correct format, your JaaS API key can then be added on the JaaS console and a Key Id (kid) will be generated for it. Please refer to the API keys section of the JaaS console for instructions on adding an API key.