NAME¶

adopt - Binds keys from one certificate to another

SYNOPSIS¶

adopt [-r|--keyring] <-k|--key> [--allow-broken-crypto] [-o|--output] [-B|--binary] [-h|--help] [TARGET-KEY]

DESCRIPTION¶

Binds keys from one certificate to another

This command allows one to transfer primary keys and subkeys into an existing certificate. Say you want to transition to a new certificate, but have an authentication subkey on your current certificate. You want to keep the authentication subkey because it allows access to SSH servers and updating their configuration is not feasible.

OPTIONS¶

-r, --keyring=KEY-RING

Supplies keys for use in --key.

-k, --key=KEY

Adds the key or subkey KEY to the TARGET-KEY

--allow-broken-crypto

Allows adopting keys from certificates using broken cryptography

-o, --output=FILE

Writes to FILE or stdout if omitted

-B, --binary

Emits binary data

-h, --help

Print help information

[TARGET-KEY]

Adds keys to TARGET-KEY

EXAMPLES¶

Adopt an subkey into the new cert

 sq key adopt --keyring juliet-old.pgp --key 0123456789ABCDEF -- juliet-new.pgp

SEE ALSO¶

For the full documentation see <https://docs.sequoia-pgp.org/sq/>.

sq(1) sq-armor(1) sq-autocrypt(1) sq-certify(1) sq-dearmor(1) sq-decrypt(1) sq-encrypt(1) sq-inspect(1) sq-key(1) sq-key-attest-certifications(1) sq-key-extract-cert(1) sq-key-generate(1) sq-key-password(1) sq-key-userid(1) sq-keyring(1) sq-keyserver(1) sq-packet(1) sq-revoke(1) sq-sign(1) sq-verify(1) sq-wkd(1)