adopt(1)

πŸ“¦
version 0.27.0 Β· 2 versions
, in debian bookworm

πŸ’– adopt(1) β€” the Sequoia Manual glow-up πŸ’–

okay bestie, welcome to adopt, straight outta the Sequoia Manual. this is the one where you take keys from one certificate and just… vibe them into another one. it's giving matchmaker energy fr fr 🫢


✨ NAME ✨

adopt β€” Binds keys from one certificate to another


🌸 SYNOPSIS 🌸

adopt [-r|--keyring] <-k|--key> [--allow-broken-crypto] [-o|--output]
[-B|--binary] [-h|--help] [TARGET-KEY]

πŸ¦‹ DESCRIPTION πŸ¦‹

Binds keys from one certificate to another.

so here's the situation, bestie. this command lets you transfer primary keys and subkeys into an existing certificate. no cap. say you wanna transition to a new certificate, but you've got an authentication subkey chilling on your current one. you wanna keep that authentication subkey because it's the whole reason you can get into your SSH servers, and updating the config on all of them is literally not feasible. 😭 so you adopt it into the new cert instead. iconic behaviour, honestly.


πŸ’… OPTIONS πŸ’…

  • -r, --keyring=KEY-RING β€” supplies the keys that --key is gonna use. it's the stash, the source, the plug. ✨
  • -k, --key=KEY β€” adds the key or subkey KEY to the TARGET-KEY. this is the actual adoption happening, periodt.
  • --allow-broken-crypto β€” lets you adopt keys from certificates that are using broken cryptography. yes it's as spicy as it sounds, proceed with the awareness that the crypto is, in fact, broken. πŸ’€
  • -o, --output=FILE β€” writes to FILE, or to stdout if you just… omit it. no file, no problem. 🌈
  • -B, --binary β€” emits binary data. raw bytes, no armour, we're going full unhinged mode. πŸ”₯
  • -h, --help β€” print help information. your bestie when you forget a flag (you will).
  • [TARGET-KEY] β€” adds keys to TARGET-KEY. this is the cert receiving the adopted babies. πŸ‘‘

πŸŽ€ EXAMPLES πŸŽ€

Adopt an subkey into the new cert:

sq key adopt --keyring juliet-old.pgp --key 0123456789ABCDEF -- juliet-new.pgp

look at juliet moving her subkey from the old cert to the new one. she's thriving. we love to see it. πŸ’œ


⭐ SEE ALSO ⭐

for the full documentation, go look at <https://docs.sequoia-pgp.org/sq/>. it's the mothership, iykyk.

sq(1) sq-armor(1) sq-autocrypt(1) sq-certify(1) sq-dearmor(1) sq-decrypt(1) sq-encrypt(1) sq-inspect(1) sq-key(1) sq-key-attest-certifications(1) sq-key-extract-cert(1) sq-key-generate(1) sq-key-password(1) sq-key-userid(1) sq-keyring(1) sq-keyserver(1) sq-packet(1) sq-revoke(1) sq-sign(1) sq-verify(1) sq-wkd(1)


okay that's the whole page, you ate that. this was sq 0.26.0, dated July 2022, and honestly? she's still serving. go adopt some keys, bestie. mwah. πŸ’–βœ¨

πŸ“¦ where this page comes from