summaryrefslogtreecommitdiff
path: root/doc/note/gpg/gpg.txt
diff options
context:
space:
mode:
Diffstat (limited to 'doc/note/gpg/gpg.txt')
-rw-r--r--doc/note/gpg/gpg.txt33
1 files changed, 33 insertions, 0 deletions
diff --git a/doc/note/gpg/gpg.txt b/doc/note/gpg/gpg.txt
index 11721f0..5580a13 100644
--- a/doc/note/gpg/gpg.txt
+++ b/doc/note/gpg/gpg.txt
@@ -67,6 +67,36 @@ you're doing! If you don't, you MUST NOT use those instructions!
gpgwin --sign-key foreignUser@example.com
+## Expand detached subkey expiry
+
+PS: Why is this so fu***** damn complicated! Anyone still wondering why this
+ system is not used by most humans?!? Please STOP producing so uselessly
+ complicated software!
+
+ cd "${WORKDIR:?}"
+ mkdir master
+ (cd "${OFFHOME:?}/.gnupg" && tar c $(ls -A)) | (cd master && tar x)
+ export GNUPGHOME="${WORKDIR:?}/master"
+ gpg --list-secret-keys --with-keygrip --keyid-format=long --with-fingerprint --with-subkey-fingerprint --list-options show-unusable-subkeys
+ gpg --edit-key SEC_KEY
+ expire
+ save
+ gpg --edit-key SSB_KEY
+ key 1
+ key 2
+ expire
+ save
+ NOW=$(date -u +%Y%m%d-%H%MZ)
+ gpg --export-secret-subkeys F00! BA5! > subkey-${NOW:?}.sec.gpg
+ gpg --export F00! BA5! > subkey-${NOW:?}.pub.gpg
+ gpg --list-packets subkey-${NOW:?}.sec.gpg
+ gpg --list-packets subkey-${NOW:?}.pub.gpg
+ tar --owner=0 --group=0 -c subkey-${NOW:?}.*.gpg | (cd "${OFFHOME:?}" && sudo tar x)
+ md5sum -b subkey-${NOW:?}.*.gpg | sudo tee -a "${OFFHOME:?}/MD5SUM"
+ echo "After import, you'd likely want to change phrase away from master"
+ gpg --edit-key foo@example.com passwd quit
+
+
## Use keys with throw-away keyring
GNUPGHOME="/tmp/foo/"
@@ -85,4 +115,7 @@ you're doing! If you don't, you MUST NOT use those instructions!
gpgconf --kill gpg-agent
gpgconf --launch gpg-agent
+[windoof: Why does git complain that no GPG agent is running?](https://superuser.com/a/1663941/1123359) says:
+ gpg-connect-agent reloadagent /bye
+