SQ(1)
π SQ(1) β User Commands π
okay bestie, welcome to the sq manual, section 1 π«Ά this lil page is for all the user commands, and today's main character is sq key subkey export. grab a snack, we're going in β¨
πΈ NAME πΈ
sq-key-subkey-export β Export secret key material from the secret key store π
π SYNOPSIS π
sq key subkey export [OPTIONS]
π¦ DESCRIPTION π¦
So. The vibe here is simple: you're pulling secret key material out of the secret key store. That's it, that's the job π
But listen β just because the secret key material is there doesn't mean it's exportable π like, secret key material sitting on a hardware security module? yeah, that usually can't be yanked off the device. it's not a you problem, it's a hardware thing. no cap.
Here's the deal: the entire certificate gets exported, but only the secret key material of the specified key actually goes out the door. And if the secret key material for that key you asked for isn't available? Error. Sorry bestie π
Oh and psst β if what you actually want is all the secret key material tied to a certificate, that's a different function, you want sq key export. this one is the specific-key girlie. periodt.
β¨ OPTIONS β¨
π Subcommand options
--cert=FINGERPRINT|KEYIDβ use certificates with the exact fingerprint or key ID you give it π--cert-email=EMAILβ use certificates where a user ID contains this email address π§--cert-userid=USERIDβ use certificates with this exact user ID πͺͺ--key=FINGERPRINT|KEYIDβ export the secret key material for this primary key or subkey π--output=FILEβ write to FILE, or to stdout if you just... don't say anything[default: -]
π Global options
- head over to
sq(1)for the full rundown of the global options, bestie, it's all documented there π
π₯ EXAMPLES π₯
say Alice wants to export her signing-capable and encryption-capable subkeys, but not her primary key and not her authentication-capable subkey. here's the move:
sq key subkey export \
--cert=EB28F26E2739A4870ECC47726F0073F60FD0CBF0 \
--key=42020B87D51877E5AF8D272124F3955B0B8DECC8 \
--key=74DCDEAF17D9B995679EB52BA6E65EA2C8497728
two --key flags, one cert, iconic behaviour truly π
π SEE ALSO π
for the full documentation, go here: <https://book.sequoia-pgp.org/> π
π VERSION π
1.5.0
and that's the whole page, bestie π this was Sequoia PGP, version 1.5.0, and it's giving certified unix icon. mwah, go export something responsibly πβ¨π
π¦ where this page comes from
- fedora 43: sequoia-sq 1.5.0-1.fc43 Β· LGPL-2.0-or-later AND Apache-2.0 AND BSL-1.0 AND BSD-3-Clause AND MIT AND MPL-2.0 AND Unicode-3.0 AND Unicode-DFS-2016 AND Zlib AND bzip2-1.0.6 AND (0BSD OR MIT OR Apache-2.0) AND (Apache-2.0 OR BSL-1.0) AND (Apache-2.0 OR MIT) AND (Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT) AND (BSD-2-Clause OR Apache-2.0 OR MIT) AND (MIT OR Apache-2.0 OR Zlib) AND (Unlicense OR MIT)
- fedora 44: sequoia-sq 1.5.0-1.fc44 Β· LGPL-2.0-or-later AND Apache-2.0 AND BSL-1.0 AND BSD-3-Clause AND MIT AND MPL-2.0 AND Unicode-3.0 AND Unicode-DFS-2016 AND Zlib AND bzip2-1.0.6 AND (0BSD OR MIT OR Apache-2.0) AND (Apache-2.0 OR BSL-1.0) AND (Apache-2.0 OR MIT) AND (Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT) AND (BSD-2-Clause OR Apache-2.0 OR MIT) AND (MIT OR Apache-2.0 OR Zlib) AND (Unlicense OR MIT)
- nixpkgs unstable: sequoia-sq 1.5.0
- opensuse-leap 16.0: sequoia-sq 1.5.0-bp160.1.1 Β· LGPL-2.0-or-later
- opensuse-leap 16.0: sequoia-sq 1.5.0-bp160.1.1 Β· LGPL-2.0-or-later
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash on : a language model's rewrite of the original, under its terms