From 69ea7c453b504c142b985f8026e133676c2cc2c3 Mon Sep 17 00:00:00 2001 From: Heiko Schaefer Date: Sun, 4 Sep 2022 20:45:04 +0200 Subject: [PATCH] opgpcard: Document optionally binding User IDs to certificates in 'admin generate' and 'pubkey'. --- tools/README.md | 15 +++++++++++++++ 1 file changed, 15 insertions(+) diff --git a/tools/README.md b/tools/README.md index 48ca007..355d1a2 100644 --- a/tools/README.md +++ b/tools/README.md @@ -181,6 +181,14 @@ And/or pass the User PIN as a file, for non-interactive use: $ opgpcard pubkey -p ``` +In the process of exporting the key material on a card as a certificate (public key), one or more User IDs can be +bound to the certificate: + +``` +$ opgpcard pubkey -p --user-id "Alice Adams " +``` + + #### Caution: the exported public key material isn't always what you want The result of exporting public key material from a card is only an approximation of the original public key, since @@ -455,6 +463,13 @@ x3z8hDoRKAU= -----END PGP PUBLIC KEY BLOCK----- ``` +In the context of generating key material, one or more User IDs can be bound to the exported certificate: + +``` +$ opgpcard admin --card ABCD:01234567 generate --user-id "Alice Adams " --output 25519 +``` + + ### Signing For now, this tool only supports creating detached signatures, like this