sshd-openpgp-auth-extend(1)

NAME
sshd-openpgp-auth-extend - Extend the expiration period of an OpenPGP certificate

SYNOPSIS
sshd-openpgp-auth extend [-e|--expiry] [-f|--fingerprint] [-o|--openpgp-dir] [-s|--stdout] [-T|--threshold] [-t|--time] [-h|--help]

DESCRIPTION
Extend the expiration period of an OpenPGP certificate

By default this command extends the expiration period of an OpenPGP certificate by 365 days from now, if the certificate would expire within the next 250 days. If more than one OpenPGP certificate is found in the target directory, an OpenPGP fingerprint must be specified. Optionally, the reference time, expiration period and threshold may be provided. Additionally, the certificate may be written to stdout instead of a file.

OPTIONS

-e, --expiry=EXPIRY
    The expiry period in days from reference time (defaults to 365)
    May also be specified with the SOA_EXPIRY environment variable.

-f, --fingerprint=FINGERPRINT
    An OpenPGP fingerprint to identify a specific certificate
    May also be specified with the SOA_FINGERPRINT environment variable.

-o, --openpgp-dir=DIR
    A custom directory in which to look for OpenPGP certificates (defaults to "/var/lib/sshd-openpgp-auth/")
    May also be specified with the SOA_OPENPGP_DIR environment variable.

-s, --stdout
    Output the OpenPGP certificate to stdout instead of a file

-T, --threshold=THRESHOLD
    A custom threshold in days from reference time, after which expiry period is extended (defaults to 250)
    May also be specified with the SOA_THRESHOLD environment variable.

-t, --time=TIME
    A custom reference time formatted as an RFC3339 string (defaults to now)
    May also be specified with the SOA_TIME environment variable.

-h, --help
    Print help (see a summary with '-h')