LX0-104 · Question #402
Which GPG command is used to create a revocation certificate in case a GPG key ever needs to be cancelled?
The correct answer is A. gpg genrevoke name. A revocation certificate is essential for invalidating a GPG key, allowing you to publicly declare it compromised or no longer in use.
Question
Options
- Agpg genrevoke name
- Bgpg editkey name followed with the revoke command.
- Cgpg revoke name
- Dgpg createrevoke name
How the community answered
(25 responses)- A92% (23)
- C4% (1)
- D4% (1)
Why each option
A revocation certificate is essential for invalidating a GPG key, allowing you to publicly declare it compromised or no longer in use.
The gpg --gen-revoke name command specifically generates a revocation certificate for the specified key, which can later be imported to mark the key as invalid on key servers and local keyrings.
While gpg --edit-key provides key management, the 'revoke' command within it is used to revoke user IDs on the key, not to generate a standalone revocation certificate for the entire key.
gpg revoke name is not a standard top-level GPG command for generating a revocation certificate.
gpg createrevoke name is not a standard GPG command for generating a revocation certificate.
Concept tested: GPG key revocation certificate creation
Source: https://www.gnupg.org/gph/en/manual/x127.html
Topics
Community Discussion
No community discussion yet for this question.