I have few sub-questions
- Do secret keys get expired, or just the public key gets expired?
Do I have to back up the master
seckey each time I renew it?
For an example:
Let's say I generate gpg keypair and
ssbfor signing, encrypting, and a revoked certificate. And I backup the master
seckey, revoked certificate and place them somewhere safe, and remove master
secfrom the key-ring.
subkeys get expire so, I get a copy of master
seckey from the safe place and re-import it to the key-ring for the sake of key renewing process. After that, can I just safely remove and delete that copy of master
seckey from the key-ring? If so, is master
seckey that I saved at the first place aware of these new renewed
seckeys, shouldn't I re-backup the
seckey after using it for renewing process? and replace to the old
seckey that I saved in the safe place?
What would happen If I generate a new
ssbkey for authentication after that renewal process? Is my master
seckey that I saved in the safe place at the first aware of the newly generated
ssbkey? If so, how is my revoked certificate affect to these new keys? (new
ssbkeys, and renewed
Do I have to re-generate revoke certificates each time after I renew the secret key, or can I just use the previously generated revoke certificate after renewing the key?
For an example:
First I generate a
seckey and a revoked certificate, then I generate
ssbboth get expire and I renew it for a next 6 months, then I lose my master
seckey, so Is my revoke certificate still valid? can I revoke the key by importing the revoked certificate?