I have few sub-questions
- Do secret keys get expired, or just the public key gets expired?
Do I have to back up the master
sec
key each time I renew it?For an example:
Let's say I generate gpg keypair and
ssb
for signing, encrypting, and a revoked certificate. And I backup the mastersec
key, revoked certificate and place them somewhere safe, and remove mastersec
from the key-ring.Then the
pub
andsub
keys get expire so, I get a copy of mastersec
key from the safe place and re-import it to the key-ring for the sake of key renewing process. After that, can I just safely remove and delete that copy of mastersec
key from the key-ring? If so, is mastersec
key that I saved at the first place aware of these new renewedpub
andsec
keys, shouldn't I re-backup thesec
key after using it for renewing process? and replace to the oldsec
key that I saved in the safe place?What would happen If I generate a new
ssb
key for authentication after that renewal process? Is my mastersec
key that I saved in the safe place at the first aware of the newly generatedssb
key? If so, how is my revoked certificate affect to these new keys? (newssb
keys, and renewedpub
keys)Do I have to re-generate revoke certificates each time after I renew the secret key, or can I just use the previously generated revoke certificate after renewing the key?
For an example:
First I generate a
sec
key and a revoked certificate, then I generatessb
key.Then
sec
andssb
both get expire and I renew it for a next 6 months, then I lose my mastersec
key, so Is my revoke certificate still valid? can I revoke the key by importing the revoked certificate?