OIDC private key is labled as public key in example configuration

[Crowley723]

The value for "key" in OIDC Connect Provider example config labeled as "Begin RSA Public Key" but later in the page in the legend it is labeled as containing the RSA private key.

Solution would be a clarification in the example (or fixing the typo :) ) from "Begin RSA Public Key" to "Begin RSA Private Key"

[glime-ai[bot]]

Please note this response was created using generative AI leveraging previously available information from the repository. This information may be helpful however it is our strong recommendation that you carefully consider the information before blindly applying it.

---

I'm sorry, I don't think I got that. Could you please provide more details?

This comment was generated by Glime.

[Crowley723]

The example configuration mis-labels an RSA private key block (in PEM format) as an RSA Public Key block. Later in the documentation the block is labeled as containing the RSA private key used to sign/encrypt the OIDC JSON Web Tokens.

[james-d-elliott]

Thanks for pointing it out. I had planned to skim over all these as they're insanely large blocks and even after mangling them I'm sure someone will copy paste and accidentally get them working. Though not sure I'd have spotted that.

[Crowley723]

As I'm setting these things up myself I'm probably going to build up a few of these issues and attempt to fix them.

[Crowley723]

I'm also noticing that blocks that mention that same key on other pages are also labeled as public key, I'm going to try and find those but I may miss a few.

[james-d-elliott]

Would welcome it, saves me having to do it and I really appreciate people getting involved. If you could while you do that limit each key to a couple lines of key material, and for any certificate chain data have an example of exactly two certs. Also be aware some of the keys really will be public keys like on the registered clients should all be public keys.

Example:

          -----BEGIN RSA PRIVATE KEY-----
          MEgCQQDAwV26ZA1lodtOQxNrJ491gWT+VzFum9IeZ+WTmMypYWyW1CzXKwsvTHDz
          9ec+jserR3EMQ0Rr24lj13FL1ib5AgMBAAE=
          -----END RSA PRIVATE KEY-----
          
          
          -----BEGIN CERTIFICATE-----
          MIIBWzCCAQWgAwIBAgIQYAKsXhJOXKfyySlmpKicTzANBgkqhkiG9w0BAQsFADAT
          MREwDwYDVQQKEwhBdXRoZWxpYTAeFw0yMzA0MjEwMDA3NDRaFw0yNDA0MjAwMDA3
          -----END CERTIFICATE-----
          -----BEGIN CERTIFICATE-----
          MIIBWzCCAQWgAwIBAgIQYAKsXhJOXKfyySlmpKicTzANBgkqhkiG9w0BAQsFADAT
          MREwDwYDVQQKEwhBdXRoZWxpYTAeFw0yMzA0MjEwMDA3NDRaFw0yNDA0MjAwMDA3
          -----END CERTIFICATE-----          

[james-d-elliott]

This has been adjusted.