sq-key-subkey-expire1
Change a subkey's expiration time
Usage
sq key
subkey
expire
[OPTIONS]
Overview
Change a subkey's expiration time.
This subcommand changes a key's expiration time. To change the expiration time of the certificate, use the `sq key expire` subcommand.
Changing the expiration time of the primary key is equivalent to changing the certificate's expiration time. The expiration time of a subkey is bound by the expiration of the certificate.
Options
Subcommand options
-
--cert=FINGERPRINT|KEYID -
Change the expiration of the specified (sub)keys on the key with the specified fingerprint or key ID
-
--cert-email=EMAIL -
Change the expiration of the specified (sub)keys on the key where a user ID includes the specified email address
-
--cert-file=PATH -
Change the expiration of the specified (sub)keys on the key read from PATH
-
--cert-userid=USERID -
Change the expiration of the specified (sub)keys on the key with the specified user ID
-
--expiration=EXPIRATION -
Sets the expiration time
-
EXPIRATION is either an ISO 8601 formatted date with an optional time or a custom duration. A duration takes the form `N[ymwds]`, where the letters stand for years, months, weeks, days, and seconds, respectively. Alternatively, the keyword `never` does not set an expiration time.
-
[default:
never]
-
--key=FINGERPRINT|KEYID -
Use the key with the specified fingerprint or key ID
-
--output=FILE -
Write to the specified FILE
-
If not specified, and the certificate was read from the certificate store, imports the modified certificate into the cert store. If not specified, and the certificate was read from a file, writes the modified certificate to stdout.
Global options
See sq(1) for a description of the global options.
Examples
Change Alice's authentication subkey to expire in 6 months.
sq key subkey expire --expiration 6m \ --cert=EB28F26E2739A4870ECC47726F0073F60FD0CBF0 \ --key=0D45C6A756A038670FDFD85CB1C82E8D27DB23A1
Version
1.4.1
Releases
2 releases since Debian 13 (Trixie); the text changed 1 time.