SQ(1)
β¨ NAME β¨
sq-key-export β bestie, this is the one that exports keys from the key store π
(She's part of the SQ(1) fam β this is the page for sq key export, k?)
π¦ SYNOPSIS π¦
sq key export [OPTIONS]
π DESCRIPTION π
Okay so. This command exports keys from the key store. That's the whole vibe. β¨
More specifically: it exports the secret key material that's associated with a certificate. Now listen, because this part is lowkey important β even if secret key material is available, that does not mean it's exportable. Fr fr. For example, secret key material stored on a hardware security module usually can't be yoinked off the device at all. It's giving "locked in, stays locked in." π
So here's what actually happens: it iterates over all of the specified certificates and exports any keys (primary key and subkeys) that have secret key material. An error gets returned if any specified certificate doesn't contain any secret key material. No secret material, no export, no mercy. π
And psst β if you only want one particular key and not all the keys hanging out with a certificate, you want sq key subkey export instead. Different tool, different girlie. π
π OPTIONS π
π Subcommand options π
--cert=FINGERPRINT|KEYIDβ export keys with the specified fingerprint or key ID. Give her the exact ID and that's who gets pulled π₯--cert-domain=DOMAINβ export keys where a user ID includes an email address for the specified domain--cert-email=EMAILβ export keys where a user ID includes the specified email address π§--cert-grep=PATTERNβ export keys with a user ID that matches the pattern, and it's matched case insensitively (so no stress about caps, she does not care)--cert-userid=USERIDβ export keys with the specified user ID--output=FILEβ write to FILE, or to stdout if you leave it out
[default: -]
π Global options π
See sq(1) for a description of the global options. They're all described over there, bestie π«Ά
π EXAMPLES π
Export Alice's certificate with all available secret key material.
sq key export --cert EB28F26E2739A4870ECC47726F0073F60FD0CBF0
Export Alice's certificate with all available secret key material identified by email address.
sq key export --cert-email alice@example.org
π§ SEE ALSO π§
For the full documentation see <https://book.sequoia-pgp.org/>. π
β VERSION β
1.5.0
Okay that's the whole page, mwah π This was Sequoia PGP version 1.5.0, and yes the version number is genuinely that iconic that it shows up twice. Go export something. Not the HSM one though, we talked about this ππΈ
π¦ where this page comes from
- fedora 43: sequoia-sq 1.5.0-1.fc43 Β· LGPL-2.0-or-later AND Apache-2.0 AND BSL-1.0 AND BSD-3-Clause AND MIT AND MPL-2.0 AND Unicode-3.0 AND Unicode-DFS-2016 AND Zlib AND bzip2-1.0.6 AND (0BSD OR MIT OR Apache-2.0) AND (Apache-2.0 OR BSL-1.0) AND (Apache-2.0 OR MIT) AND (Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT) AND (BSD-2-Clause OR Apache-2.0 OR MIT) AND (MIT OR Apache-2.0 OR Zlib) AND (Unlicense OR MIT)
- fedora 44: sequoia-sq 1.5.0-1.fc44 Β· LGPL-2.0-or-later AND Apache-2.0 AND BSL-1.0 AND BSD-3-Clause AND MIT AND MPL-2.0 AND Unicode-3.0 AND Unicode-DFS-2016 AND Zlib AND bzip2-1.0.6 AND (0BSD OR MIT OR Apache-2.0) AND (Apache-2.0 OR BSL-1.0) AND (Apache-2.0 OR MIT) AND (Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT) AND (BSD-2-Clause OR Apache-2.0 OR MIT) AND (MIT OR Apache-2.0 OR Zlib) AND (Unlicense OR MIT)
- nixpkgs unstable: sequoia-sq 1.5.0
- opensuse-leap 16.0: sequoia-sq 1.5.0-bp160.1.1 Β· LGPL-2.0-or-later
- opensuse-leap 16.0: sequoia-sq 1.5.0-bp160.1.1 Β· LGPL-2.0-or-later
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash on : a language model's rewrite of the original, under its terms