mix wallet_passes.gen.apple_nfc_key (wallet_passes v0.6.0)

Copy Markdown View Source

Generates a P-256 (secp256r1) keypair for Apple Wallet NFC passes (VAS).

$ mix wallet_passes.gen.apple_nfc_key [output_dir]

Defaults to ./nfc_keys if no directory is given.

Three files are written:

  • nfc_private.pem — PKCS#8 private key. Hand this to your VAS reader vendor.
  • nfc_public.pem — SPKI public key in compressed-point form.
  • nfc_public.b64 — single-line base64 of the SPKI key, ready to paste into PassData's :nfc_encryption_public_key field (or pass.json's nfc.encryptionPublicKey).

Existing files in the output directory are never overwritten — losing a private key you've already shared with a reader vendor would be painful.

Apple NFC passes also require a special entitlement from Apple — apply at https://developer.apple.com/contact/passkit/.

Requires openssl on PATH.