This step is optional and should be repeated as many times as needed. Now let’s add any extra ID that we would want to use to the key pair. Note that a revocation certificate has already been created, so we don’t need to create a new one if we don’t want: gpg: revocation certificate stored as '/Users/dpecos/.gnupg/openpgp-revocs.d/31EFB482E969EB74399DBBC5E881015C8A55678B.rev' We got the key ID 31EFB482E969EB74399DBBC5E881015C8A55678B, which we’ll be using to reference the key whenever needed (like editing the key, adding signatures, …). Public and secret key created and signed. Gpg: key E881015C8A55678B marked as ultimately trusted Generator a better chance to gain enough entropy.
Some other action (type on the keyboard, move the mouse, utilize theĭisks) during the prime generation this gives the random number We need to generate a lot of random bytes. GnuPG needs to construct a user ID to identify your key.Ĭhange (N)ame, (C)omment, (E)mail or (O)kay/(Q)uit? o Please specify how long the key should be valid. Gpg (GnuPG) 2.2.14 Copyright (C) 2019 Free Software Foundation, Inc. Let’s start generating the new key pair, without expiration date (we will be able to set one if needed in the future): $ gpg -full-generate-key
#Keybase openpgp install#
If you’re using MacOSX, you will need this application to handle password prompts: brew install pinentry-mac Hash: SHA1, RIPEMD160, SHA256, SHA384, SHA512, SHA224Ĭompression: Uncompressed, ZIP, ZLIB, BZIP2 Pubkey: RSA, ELG, DSA, ECDH, ECDSA, EDDSAĬipher: IDEA, 3DES, CAST5, BLOWFISH, AES, AES192, AES256, TWOFISH,
There is NO WARRANTY, to the extent permitted by law.
This is free software: you are free to change and redistribute it. License GPLv3+: GNU GPL version 3 or later This is the GnuPG version used in this tutorial (if you are using a different version, probably not every command would work the same, but I wouldn’t expect for the concept to change that much): $ gpg -versionĬopyright (C) 2019 Free Software Foundation, Inc. This tutorial will show you the steps I followed with explanations on what we are achieving in every step.
#Keybase openpgp how to#
It’s been a while (well, years) since I rotated my GPG keys, and to be honest, now that I know better how to handle a GPG key pair in order to avoid master key rotation, I think it’s the time to get a new pair.
0 kommentar(er)
