revoke(1)

NAME
revoke - Generates revocation certificates

SYNOPSIS
revoke [-h|--help] <subcommands>

DESCRIPTION
Generates revocation certificates.

A revocation certificate indicates that a certificate, a subkey, a User ID, or a signature should not be used anymore.

A revocation certificate includes two fields, a type and a human-readable explanation, which allows the issuer to indicate why the revocation certificate was issued. It is important to set the type field accurately as this allows an OpenPGP implementation to better reason about artifacts whose validity relies on the revoked object. For instance, if a certificate is retired, it is reasonable to consider signatures that it made prior to its retirement as still being valid. However, if a certificate's secret key material is compromised, any signatures that it made should be considered potentially forged, as they could have been made by an attacker and backdated.

As the intent of a revocation certificate is to stop others from using a certificate, it is necessary to distribute the revocation certificate. One effective way to do this is to upload the revocation certificate to a keyserver.

OPTIONS

-h, --help
    Print help information

SUBCOMMANDS

revoke-certificate(1)
    Revoke a certificate

revoke-subkey(1)
    Revoke a subkey

revoke-userid(1)
    Revoke a User ID

EXAMPLES
 Revoke a certificate.

     sq revoke certificate --time 20220101 --certificate juliet.pgp \
  compromised "My parents went through my things, and found my backup."

 Revoke a User ID.

     sq revoke userid --time 20220101 --certificate juliet.pgp \
  "Juliet <juliet@capuleti.it>" retired "I've left the family."

SEE ALSO
For the full documentation see <https://docs.sequoia-pgp.org/sq/>.

sq(1) sq-armor(1) sq-autocrypt(1) sq-certify(1) sq-dearmor(1) sq-decrypt(1) sq-encrypt(1) sq-inspect(1) sq-key(1) sq-keyring(1) sq-keyserver(1) sq-packet(1) sq-revoke-certificate(1) sq-revoke-subkey(1) sq-revoke-userid(1) sq-sign(1) sq-verify(1) sq-wkd(1)