adopt(1)

NAME
adopt - Binds keys from one certificate to another

SYNOPSIS
adopt [-r|--keyring] <-k|--key> [--expire] [--allow-broken-crypto] [-o|--output] [-B|--binary] [-h|--help] [TARGET-KEY]

DESCRIPTION
Binds keys from one certificate to another

This command allows one to transfer primary keys and subkeys into an existing certificate. Say you want to transition to a new certificate, but have an authentication subkey on your current certificate. You want to keep the authentication subkey because it allows access to SSH servers and updating their configuration is not feasible.

OPTIONS

-r, --keyring=KEY-RING
    Supplies keys for use in --key.

-k, --key=KEY
    Adds the key or subkey KEY to the TARGET-KEY

--expire=KEY-EXPIRATION-TIME
    Makes adopted subkeys expire at the given time

--allow-broken-crypto=ALLOW_BROKEN_CRYPTO
    Allows adopting keys from certificates using broken cryptography

-o, --output=FILE
    Writes to FILE or stdout if omitted

-B, --binary=BINARY
    Emits binary data

-h, --help
    Print help information (use `-h` for a summary)

[TARGET-KEY]
    Adds keys to TARGET-KEY

EXTRA
EXAMPLES: # Adopt an subkey into the new cert $ sq key adopt --keyring juliet-old.pgp --key 0123456789ABCDEF -- juliet-new.pgp