LFCS · Question #402
Which GPG command is used to create a revocation certificate in case a GPG key ever needs to be cancelled?
The correct answer is A. gpg genrevoke name. The gpg genrevoke command is used to create a revocation certificate, which can later be published to cancel a GPG key if it becomes compromised.
Question
Options
- Agpg genrevoke name
- Bgpg editkey name followed with the revoke command.
- Cgpg revoke name
- Dgpg createrevoke name
How the community answered
(42 responses)- A93% (39)
- B5% (2)
- C2% (1)
Why each option
The `gpg genrevoke` command is used to create a revocation certificate, which can later be published to cancel a GPG key if it becomes compromised.
The `gpg --gen-revoke` command specifically generates a revocation certificate for a designated key, which is a crucial step to invalidate a key in case it's lost or compromised, without immediately revoking it.
While `gpg editkey` allows for interactive key management including revocation, `gpg genrevoke` directly creates the certificate for future use without entering an interactive session.
`gpg revoke` is not a standalone command for generating a revocation certificate; revocation is typically performed within an interactive `edit-key` session or by applying a generated certificate.
`gpg createrevoke` is not a standard GPG command for creating revocation certificates.
Concept tested: GPG key revocation certificate generation
Source: https://gnupg.org/documentation/manuals/gnupg/Revoking-Keys.html
Topics
Community Discussion
No community discussion yet for this question.