Revision as of 19:54, 15 September 2023

Generate the GPG keys

gpg --full-generate-key

gpg (GnuPG) 2.3.3; Copyright (C) 2021 Free Software Foundation, Inc.
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.

Please select what kind of key you want:
   (1) RSA and RSA (default)
   (2) DSA and Elgamal
   (3) DSA (sign only)
   (4) RSA (sign only)
  (14) Existing key from card
Your selection? 1

RSA keys may be between 1024 and 4096 bits long.
What keysize do you want? (3072) 2048

Requested keysize is 2048 bits
Please specify how long the key should be valid.
         0 = key does not expire
      <n>  = key expires in n days
      <n>w = key expires in n weeks
      <n>m = key expires in n months
      <n>y = key expires in n years
Key is valid for? (0) 2y

Key expires at Sun 14 Sep 2025 12:39:48 PM PDT
Is this correct? (y/N) y

GnuPG needs to construct a user ID to identify your key.

Real name: Darth Vader

Email address: [email protected]

Comment:

You selected this USER-ID:
    "Darth Vader <[email protected]>"

Change (N)ame, (C)omment, (E)mail or (O)kay/(Q)uit? O

Provide a passphrase to secret key

We need to generate a lot of random bytes. It is a good idea to perform
some other action (type on the keyboard, move the mouse, utilize the
disks) during the prime generation; this gives the random number
generator a better chance to gain enough entropy.
We need to generate a lot of random bytes. It is a good idea to perform
some other action (type on the keyboard, move the mouse, utilize the
disks) during the prime generation; this gives the random number
generator a better chance to gain enough entropy.
gpg: key 2559F227B6467805 marked as ultimately trusted
gpg: directory '/home/darthvader/.gnupg/openpgp-revocs.d' created
gpg: revocation certificate stored as '/home/darthvader/.gnupg/openpgp-revocs.d/8E518A1F4F7E8CC13867B82F2559F227B6467805.rev'
public and secret key created and signed.

pub   rsa2048 2023-09-15 [SC] [expires: 2025-09-14]
      8E518A1F4F7E8CC13867B82F2559F227B6467805
uid                      Darth Vader <[email protected]>
sub   rsa2048 2023-09-15 [E] [expires: 2025-09-14]

List Keys

# gpg --list-keys

gpg: checking the trustdb
gpg: marginals needed: 3  completes needed: 1  trust model: pgp
gpg: depth: 0  valid:   1  signed:   0  trust: 0-, 0q, 0n, 0m, 0f, 1u
gpg: next trustdb check due at 2025-09-14
/home/darthvader/.gnupg/pubring.kbx
------------------------
pub   rsa2048 2023-09-15 [SC] [expires: 2025-09-14]
      8E518A1F4F7E8CC13867B82F2559F227B6467805
uid           [ultimate] Darth Vader <[email protected]>
sub   rsa2048 2023-09-15 [E] [expires: 2025-09-14]

List Secret Keys

[root@moth1 ~]# gpg --list-secret-keys

/home/darthvader/.gnupg/pubring.kbx
------------------------
sec   rsa2048 2023-09-15 [SC] [expires: 2025-09-14]
      8E518A1F4F7E8CC13867B82F2559F227B6467805
uid           [ultimate] Darth Vader <[email protected]>
ssb   rsa2048 2023-09-15 [E] [expires: 2025-09-14]

Extract public key from darthvader into a file named darthvader.pub.key

gpg --armor --export [email protected] > darthvader.gpg.pub.key

verficando

cat darthvader.gpg.pub.key

-----BEGIN PGP PUBLIC KEY BLOCK-----

mQENBGUEsxgBCADXsgnK555XrHYh5hEtlmc7QFsCCs6n6kVoiHiXvifiAS8ZHW5m
..
-----END PGP PUBLIC KEY BLOCK-----