sq-key-adopt(1)

Binds keys from one certificate to another

Section 1 sq bookworm source

Description

adopt

NAME

adopt - Binds keys from one certificate to another

SYNOPSIS

adopt [-r|--keyring] <-k|--key> [--allow-broken-crypto] [-o|--output] [-B|--binary] [-h|--help] [TARGET-KEY]

DESCRIPTION

Binds keys from one certificate to another

This command allows one to transfer primary keys and subkeys into an existing certificate. Say you want to transition to a new certificate, but have an authentication subkey on your current certificate. You want to keep the authentication subkey because it allows access to SSH servers and updating their configuration is not feasible.

OPTIONS

-r, --keyring=KEY-RING

Supplies keys for use in --key.

-k, --key=KEY

Adds the key or subkey KEY to the TARGET-KEY

--allow-broken-crypto

Allows adopting keys from certificates using broken cryptography

-o, --output=FILE

Writes to FILE or stdout if omitted

-B, --binary

Emits binary data

-h, --help

Print help information

[TARGET-KEY]

Adds keys to TARGET-KEY

EXAMPLES

Adopt an subkey into the new cert

sq key adopt --keyring juliet-old.pgp --key 0123456789ABCDEF -- juliet-new.pgp

SEE ALSO

For the full documentation see <https://docs.sequoia-pgp.org/sq/>.

sq(1) sq-armor(1) sq-autocrypt(1) sq-certify(1) sq-dearmor(1) sq-decrypt(1) sq-encrypt(1) sq-inspect(1) sq-key(1) sq-key-attest-certifications(1) sq-key-extract-cert(1) sq-key-generate(1) sq-key-password(1) sq-key-userid(1) sq-keyring(1) sq-keyserver(1) sq-packet(1) sq-revoke(1) sq-sign(1) sq-verify(1) sq-wkd(1)

See Also

  • sq(1)
  • armor(1)
  • autocrypt(1)
  • certify(1)
  • dearmor(1)
  • decrypt(1)
  • encrypt(1)
  • inspect(1)
  • key(1)
  • certifications(1)
  • cert(1)
  • generate(1)
  • password(1)
  • userid(1)
  • keyring(1)
  • keyserver(1)
  • packet(1)
  • revoke(1)
  • sign(1)
  • verify(1)
  • wkd(1)