Error: Cannot read public key. OID is not RSA.

[Naman-Codiste]

I have generated signerCer.pem , signerKey.pem and wwdr.pem (G6 version) but after tons of times of extracting pem file it still gives this error everytime as "Error: Cannot read public key. OID is not RSA."

I have also took reference from https://github.com/alexandercerutti/passkit-generator/wiki/Generating-Certificates for take guide about how to generate but it goes into mess when you have OpenSSL >= 3 version.

So it would be great if someone guide step by step to generate those certificates with the best practice to import or assign under PKPass.from({ .... }). I'm using in my Nest JS Project

This is my current code snippet.

const certsDirPath = path.join(process.cwd(), 'src/card/certs/new');
const signerKeyPassphrase = "PASS_PHRASE"

const pass = await PKPass.from({
	model: 'src/card/passModel/cardModel.pass', 
		certificates: {
			wwdr: fs.readFileSync(path.join(certsDirPath, 'wwdr.pem')),
			signerKey: fs.readFileSync(path.join(certsDirPath, 'signerKey.pem')),
			signerCert: fs.readFileSync(path.join(certsDirPath, 'signerCert.pem')),
			signerKeyPassphrase,
		},
	});

	pass.type = 'generic';

	const passBuffer = await pass.getAsBuffer();

Here is the folder structure

project-root/
├── src/
│ └── card/
| └── certs/
│ └──new/
│ └── signerCert.pem
| └── card.service.ts

Please guide me @alexandercerutti

Thanking You,
Naman Shah

[alexandercerutti]

Hello @Naman-Codiste, thanks for using passkit-generator.
Did you try with WWDR G4? For what I know, G6 is not compatible with Apple Wallet.

Let me know.

[Naman-Codiste]

Thanks for the info. Also can give me list of things which we can add into pass object before going for converting it into buffer like serialNumber,etc. and where they will suppose to get reflect while adding to apple wallet

[alexandercerutti]

Sorry, I don't have exactly clear what you are asking me. Mind expanding please?

[Naman-Codiste]

List of Keys that we can add or override into pass json

[alexandercerutti]

You can find them all here:

passkit-generator/src/schemas/index.ts

Lines 434 to 699 in 829d7da

	export const OverridablePassProps = Joi.object<OverridablePassProps>({
	formatVersion: Joi.number().default(1),
	semantics: Semantics,
	voided: Joi.boolean(),
	logoText: Joi.string(),
	description: Joi.string(),
	serialNumber: Joi.string(),
	appLaunchURL: Joi.string(),
	teamIdentifier: Joi.string(),
	organizationName: Joi.string(),
	passTypeIdentifier: Joi.string(),
	sharingProhibited: Joi.boolean(),
	groupingIdentifier: Joi.string(),
	suppressStripShine: Joi.boolean(),
	maxDistance: Joi.number().positive(),
	authenticationToken: Joi.string().min(16),
	labelColor: Joi.string().regex(RGB_HEX_COLOR_REGEX),
	stripColor: Joi.string().regex(RGB_HEX_COLOR_REGEX),
	backgroundColor: Joi.string().regex(RGB_HEX_COLOR_REGEX),
	foregroundColor: Joi.string().regex(RGB_HEX_COLOR_REGEX),
	associatedStoreIdentifiers: Joi.array().items(Joi.number()),
	userInfo: Joi.alternatives(Joi.object().unknown(), Joi.array()),
	webServiceURL: Joi.string().regex(URL_REGEX),
	/**
	* @iOSVersion 18
	* @passStyle eventTicket (new layout)
	* @passDomain Event Guide
	*
	* To show buttons in the event guide,
	* at least two among those marked with
	* "@passDomain Event Guide" must be used.
	*/
	bagPolicyURL: Joi.string().regex(URL_REGEX),
	/**
	* @iOSVersion 18
	* @passStyle eventTicket (new layout)
	* @passDomain Event Guide
	*
	* To show buttons in the event guide,
	* at least two among those marked with
	* "@passDomain Event Guide" must be used.
	*/
	orderFoodURL: Joi.string().regex(URL_REGEX),
	/**
	* @iOSVersion 18
	* @passStyle eventTicket (new layout)
	* @passDomain Event Guide
	*
	* To show buttons in the event guide,
	* at least two among those marked with
	* "@passDomain Event Guide" must be used.
	*/
	parkingInformationURL: Joi.string().regex(URL_REGEX),
	/**
	* @iOSVersion 18
	* @passStyle eventTicket (new layout)
	* @passDomain Event Guide
	*
	* To show buttons in the event guide,
	* at least two among those marked with
	* "@passDomain Event Guide" must be used.
	*/
	directionsInformationURL: Joi.string(),
	/**
	* @iOSVersion 18
	* @passStyle eventTicket (new layout)
	* @passDomain Event Guide
	*
	* @description
	*
	* URL to a resource to buy or access
	* the parking spot.
	*
	* To show buttons in the event guide,
	* at least two among those marked with
	* "@passDomain Event Guide" must be used.
	*/
	purchaseParkingURL: Joi.string(),
	/**
	* @iOSVersion 18
	* @passStyle eventTicket (new layout)
	* @passDomain Event Guide
	*
	* @description
	*
	* URL to a resource to buy the
	* merchandise.
	*
	* To show buttons in the event guide,
	* at least two among those marked with
	* "@passDomain Event Guide" must be used.
	*/
	merchandiseURL: Joi.string(),
	/**
	* @iOSVersion 18
	* @passStyle eventTicket (new layout)
	* @passDomain Event Guide
	*
	* @description
	*
	* URL to a resource about public or
	* private transportation to reach the
	* venue.
	*
	* To show buttons in the event guide,
	* at least two among those marked with
	* "@passDomain Event Guide" must be used.
	*/
	transitInformationURL: Joi.string(),
	/**
	* @iOSVersion 18
	* @passStyle eventTicket (new layout)
	* @passDomain Event Guide
	*
	* @description
	*
	* URL to a resource about accessibility
	* in the events venue.
	*
	* To show buttons in the event guide,
	* at least two among those marked with
	* "@passDomain Event Guide" must be used.
	*/
	accessibilityURL: Joi.string(),
	/**
	* @iOSVersion 18
	* @passStyle eventTicket (new layout)
	* @passDomain Event Guide
	*
	* @description
	*
	* An URL to link experiences to the
	* pass (upgrades and more).
	*
	* To show buttons in the event guide,
	* at least two among those marked with
	* "@passDomain Event Guide" must be used.
	*/
	addOnURL: Joi.string(),
	/**
	* @iOSVersion 18
	* @passStyle eventTicket (new layout)
	* @passDomain Event Guide
	*
	* @description
	*
	* To show buttons in the event guide,
	* at least two among those marked with
	* "@passDomain Event Guide" must be used.
	*/
	contactVenueEmail: Joi.string(),
	/**
	* @iOSVersion 18
	* @passStyle eventTicket (new layout)
	* @passDomain Event Guide
	*
	* @description
	*
	* To show buttons in the event guide,
	* at least two among those marked with
	* "@passDomain Event Guide" must be used.
	*/
	contactVenuePhoneNumber: Joi.string(),
	/**
	* @iOSVersion 18
	* @passStyle eventTicket (new layout)
	* @passDomain Event Guide
	*
	* @description
	*
	* To show buttons in the event guide,
	* at least two among those marked with
	* "@passDomain Event Guide" must be used.
	*/
	contactVenueWebsite: Joi.string(),
	/**
	* @iOSVersion 18
	* @passStyle eventTicket (new layout)
	*
	* @description
	*
	* Will add a button among options near "share"
	*/
	transferURL: Joi.string(),
	/**
	* @iOSVersion 18
	* @passStyle eventTicket (new layout)
	*
	* @description
	*
	* Will add a button among options near "share"
	*/
	sellURL: Joi.string(),
	/**
	* @iOSVersion 18
	* @passStyle eventTicket (new layout)
	*
	* @description
	*
	* Will remove an automatic shadow in the new
	* event ticket layouts.
	*/
	suppressHeaderDarkening: Joi.boolean(),
	/**
	* @iOSVersion 18
	* @passStyle eventTicket (new layout)
	*
	* @description
	*
	* By default, the chin is colored with a
	* blur. Through this option, it is possible
	* to specify a different and specific color
	* for it.
	*/
	footerBackgroundColor: Joi.string().regex(RGB_HEX_COLOR_REGEX),
	/**
	* @iOSVersion 18
	* @passStyle eventTicket (new layout)
	*
	* @description
	*
	* Enables the automatic calculation of the
	* `foregroundColor` and `labelColor` based
	* on the background image in the new event
	* ticket passes.
	*
	* If enabled, `foregroundColor` and `labelColor`
	* are ignored.
	*/
	useAutomaticColor: Joi.boolean(),
	/**
	* @iOSVersion 18
	* @passStyle eventTicket (new layout)
	*
	* @description
	*
	* Applications AppStore Identifiers
	* related to the event ticket.
	*
	* It is not mandatory for the app to
	* be related to the pass issuer.
	*
	* Such applications won't be able to read
	* the passes users has (probably differently
	* by `associatedStoreIdentifiers`).
	*/
	auxiliaryStoreIdentifiers: Joi.array().items(Joi.number()),
	}).with("webServiceURL", "authenticationToken");

However, if you are using Typescript (if you are not, I seriously suggest it), you should see the list through the autocompletion (intellisense).

Those not available here, are available through the methods, that will perform deeper validation.

[Naman-Codiste]

Thanks for the information. Got relief after 3 days of frustration over generating pkpass file.