Git-Mirrors/Qubes-Community-Content
1
0
Fork 0
mirror of https://github.com/Qubes-Community/Contents.git synced 2024-12-22 21:59:26 -05:00
Code Issues Packages Projects Releases Wiki Activity

Update split-gpg.md

Browse Source
This commit is contained in:
Nick Monti 2021-10-13 10:17:24 -07:00 committed by GitHub
parent 5e74d15991
commit f2fd859f9c
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
docs/security/split-gpg.md
View File

@ -29,11 +29,11 @@ Subkeys are essentially children keys of the main keypair. The advantage is they
<sup>[Setup without subkeys](https://www.qubes-os.org/doc/split-gpg/#setup-description)</sup> <sup>[Setup without subkeys](https://www.qubes-os.org/doc/split-gpg/#setup-description)</sup>
### Create master key ### Create main key
Skip to [Create Subkey](#create-subkey) if you already have a key. Skip to [Create Subkey](#create-subkey) if you already have a key.
In `vault`, create the master keypair, subkeys, and a revocation certificate. In `vault`, create the main keypair, subkeys, and a revocation certificate.
``` ```
[user@vault ~]$ gpg --full-generate-key [user@vault ~]$ gpg --full-generate-key
@ -84,7 +84,7 @@ Backup keys and revocation cert, then shred the exported keys:
[user@vault ~]$ tar -cf backup_alice_keys.tar alice* [user@vault ~]$ tar -cf backup_alice_keys.tar alice*
[user@vault ~]$ shred -u alice* [user@vault ~]$ shred -u alice*
``` ```
The master key is still in the keyring. Export its subkeys in a temp file, delete the master key from the keyring, then import the subkeys. Be sure to delete `subkeys` after importing. The main key is still in the keyring. Export its subkeys in a temp file, delete the main key from the keyring, then import the subkeys. Be sure to delete `subkeys` after importing.
``` ```
[user@vault ~]$ gpg --export-secret-subkeys alice > subkeys [user@vault ~]$ gpg --export-secret-subkeys alice > subkeys
[user@vault ~]$ gpg --delete-secret-key alice [user@vault ~]$ gpg --delete-secret-key alice