SQ(1)

NAME
sq key adopt - Binds keys from one certificate to another

SYNOPSIS
sq [GLOBAL OPTIONS] key adopt [OPTIONS] TARGET-KEY

DESCRIPTION
Binds keys from one certificate to another.

This command allows one to transfer primary keys and subkeys into an existing certificate. Say you want to transition to a new certificate, but have an authentication subkey on your current certificate. You want to keep the authentication subkey because it allows access to SSH servers and updating their configuration is not feasible.

OPTIONS

  Global options

--cert-store=PATH
    Specifies the location of the certificate store

-f, --force=FORCE
    Overwrites existing files

--keyring=PATH
    Specifies the location of a keyring to use

--known-notation=NOTATION
    Adds NOTATION to the list of known notations

--no-cert-store=NO_CERT_STORE
    Disables the use of a certificate store

--output-format=FORMAT
    Produces output in FORMAT, if possible

--output-version=VERSION
    Produces output variant VERSION.

--pep-cert-store=PATH
    Specifies the location of a pEp certificate store

--time=TIME
    Sets the reference time as ISO 8601 formatted timestamp

--trust-root=FINGERPRINT|KEYID
    Considers the specified certificate to be a trust root

  Subcommand options

-B, --binary=BINARY
    Emits binary data

--allow-broken-crypto=ALLOW_BROKEN_CRYPTO
    Allows adopting keys from certificates using broken cryptography

--expire=KEY-EXPIRATION-TIME
    Makes adopted subkeys expire at the given time

-k, --key=KEY
    Adds the key or subkey KEY to the TARGET-KEY

-o, --output=FILE
    Writes to FILE or stdout if omitted

-r, --keyring=KEY-RING
    Supplies keys for use in --key.

EXAMPLES

Adopt an subkey into the new cert

    sq key adopt --keyring juliet-old.pgp --key 0123456789ABCDEF -- juliet-new.pgp

SEE ALSO
sq(1).

For the full documentation see <https://docs.sequoia-pgp.org/sq/>.

VERSION
0.30.1 (sequoia-openpgp 1.16.0, using Nettle 3.9 (Cv448: true))