SQ(1)

πŸ’– SQ(1) β€” User Commands πŸ’–

okay bestie, welcome to the sq manual, section 1 🫢 this lil page is for all the user commands, and today's main character is sq key subkey export. grab a snack, we're going in ✨


🌸 NAME 🌸

sq-key-subkey-export β€” Export secret key material from the secret key store πŸ’…


πŸŽ€ SYNOPSIS πŸŽ€

sq key subkey export [OPTIONS]

πŸ¦‹ DESCRIPTION πŸ¦‹

So. The vibe here is simple: you're pulling secret key material out of the secret key store. That's it, that's the job 🌈

But listen β€” just because the secret key material is there doesn't mean it's exportable 😭 like, secret key material sitting on a hardware security module? yeah, that usually can't be yanked off the device. it's not a you problem, it's a hardware thing. no cap.

Here's the deal: the entire certificate gets exported, but only the secret key material of the specified key actually goes out the door. And if the secret key material for that key you asked for isn't available? Error. Sorry bestie πŸ™ˆ

Oh and psst β€” if what you actually want is all the secret key material tied to a certificate, that's a different function, you want sq key export. this one is the specific-key girlie. periodt.


✨ OPTIONS ✨

πŸ’œ Subcommand options

  • --cert=FINGERPRINT|KEYID β€” use certificates with the exact fingerprint or key ID you give it πŸ”
  • --cert-email=EMAIL β€” use certificates where a user ID contains this email address πŸ“§
  • --cert-userid=USERID β€” use certificates with this exact user ID πŸͺͺ
  • --key=FINGERPRINT|KEYID β€” export the secret key material for this primary key or subkey πŸ‘‘
  • --output=FILE β€” write to FILE, or to stdout if you just... don't say anything
    • [default: -]

🌍 Global options

  • head over to sq(1) for the full rundown of the global options, bestie, it's all documented there πŸ“–

πŸ”₯ EXAMPLES πŸ”₯

say Alice wants to export her signing-capable and encryption-capable subkeys, but not her primary key and not her authentication-capable subkey. here's the move:

sq key subkey export \
       --cert=EB28F26E2739A4870ECC47726F0073F60FD0CBF0 \
       --key=42020B87D51877E5AF8D272124F3955B0B8DECC8 \
       --key=74DCDEAF17D9B995679EB52BA6E65EA2C8497728

two --key flags, one cert, iconic behaviour truly 🌟


πŸ‘€ SEE ALSO πŸ‘€

for the full documentation, go here: <https://book.sequoia-pgp.org/> 🌈


πŸ“Œ VERSION πŸ“Œ

1.5.0


and that's the whole page, bestie πŸ’– this was Sequoia PGP, version 1.5.0, and it's giving certified unix icon. mwah, go export something responsibly πŸŽ€βœ¨πŸ’…

πŸ“¦ where this page comes from