SQ(1)

NAME
sq revoke certificate - Revoke a certificate

SYNOPSIS
sq [GLOBAL OPTIONS] revoke certificate [OPTIONS] REASON MESSAGE

DESCRIPTION
Revokes a certificate.

Creates a revocation certificate for the certificate.

If "--revocation-file" is provided, then that key is used to create the signature. If that key is different from the certificate being revoked, this creates a third-party revocation. This is normally only useful if the owner of the certificate designated the key to be a designated revoker.

If "--revocation-file" is not provided, then the certificate must include a certification-capable key.

"sq revoke" respects the reference time set by the top-level "--time" argument. When set, it uses the specified time instead of the current time, when determining what keys are valid, and it sets the revocation certificate's creation time to the reference time instead of the current time.

OPTIONS

  Global options

--cert-store=PATH
    Specifies the location of the certificate store

-f, --force=FORCE
    Overwrites existing files

--keyring=PATH
    Specifies the location of a keyring to use

--known-notation=NOTATION
    Adds NOTATION to the list of known notations

--no-cert-store=NO_CERT_STORE
    Disables the use of a certificate store

--output-format=FORMAT
    Produces output in FORMAT, if possible

--output-version=VERSION
    Produces output variant VERSION.

--pep-cert-store=PATH
    Specifies the location of a pEp certificate store

--time=TIME
    Sets the reference time as ISO 8601 formatted timestamp

--trust-root=FINGERPRINT|KEYID
    Considers the specified certificate to be a trust root

  Subcommand options

-B, --binary=BINARY
    Emits binary data

--certificate-file=FILE
    The certificate to revoke

--notation=NAME
    Adds a notation to the certification.

--private-key-store=KEY_STORE
    Provides parameters for private key store

--revocation-file=KEY_FILE
    Signs the revocation certificate using the key in KEY_FILE

SEE ALSO
sq(1).

For the full documentation see <https://docs.sequoia-pgp.org/sq/>.

VERSION
0.30.1 (sequoia-openpgp 1.16.0, using Nettle 3.9 (Cv448: true))