{{tag>Brouillon}} # GPG - Renouvellement de clefs ## Revoke Revoquer ca clef https://www.gnupg.org/gph/en/manual/c235.html ~~~bash gpg --gen-revoke 50D12DE07663C664 --output ~/revocation.crt chmod 600 ~/revocation.crt ~~~ ~~~bash gpg --import ~/.gnupg/email@domain.tld.rev.asc gpg --export -a your_keyid >mykey.asc gpg --keyserver subkeys.pgp.net --send 50D12DE07663C664 gpg --keyserver pgp.mit.edu --send-keys mykey ~~~ revkey revsig save ~~~bash gpg --import ~/.gnupg/email@domain.tld.public_key.asc ~/.gnupg/email@domain.tld.private_key.asc gpg --edit-key email@domain.tld ~~~ ## Expired Que faire quand la clef a expirée https://makandracards.com/makandra-orga/13644-what-to-do-when-your-gpg-pgp-key-expires ~~~ gpg --edit-key 0x12345678 gpg> expire ... gpg> save ~~~ ~~~ gpg --edit-key 0x12345678 gpg> key 1 gpg> expire ... gpg> key 1 gpg> key 2 gpg> expire ... gpg> save ~~~ ## Renew primary key https://200ok.ch/posts/2019-07-17_update_a_pgp_primary_key.html https://infra.apache.org/key-transition.html