GnuPG tips: Renewal

gpg.renewal.txt

# Insert offline Master Key
# Import master key
gpg --import <path_to_master_key>
# Edit key to renew
gpg --edit-key <email/key_id>
# renew each key and subkey with:
# key <#>
# to select key and
# expire
# to change expiration date, even if it is already expired, it does _not_ matter
# export secret key
gpg --export-secret-keys --armor <email/key_id> > <key_id>.priv.asc
# export secret subkeys
gpg --export-secret-subkeys <email/key_id> > <key_id>.sub_priv.asc
# export pub keys
gpg --export --armor <email/key_id> > <key_id>.pub.asc
# Move to external storage
mv *.asc <path_to_offline_storage>

# (Optinal) Publish
gpg --send-key <key_id>
# (Optional) On other places import renewed keys
gpg --import <path_to_secret_subkey>