Keyserver Commands#

  • download key from keyserver: gpg --recv-keys <key_id>

  • update all keys from keyserver: gpg --refresh-keys

  • import key with all signatures: gpg --recv-key --verbose --keyserver-options no-import-clean --keyserver-options no-self-sigs-only <key_id>

Get Key Infos#

  • list all keys: gpg --list-keys

  • list all secret keys: gpg --list-secret-keys

Key Card Commands (YubiKey)#

  • gpg --card-edit

  • also see

Mac install#

  • install with brew install gnupg pinentry-mac

  • set pinentry-program /opt/homebrew/bin/pinentry-mac in ~/.gnupg/gpg-agent.conf

Important Keys#

  • CAcert A31D 4F81 EF4E BD07 B456 FA04 D2BB 0D01 65D0 FD58:

  • Pierre Schmitz (Arch Linux packager) 3E80 CA1A 8B89 F69C BA57  D98A 76A5 EF90 5444 9A5C:

  • Debian CD signing key:DF9B 9C49 EAA9 2984 3258  9D76 DA87 E80D 6294 BE9B:

  • Tails: A490 D0F4 D311 A415 3E2B  B7CA DBB8 02B2 58AC D84F