.ie \n(.g .ds Aq \(aq
.el .ds Aq '
.TH sshd-openpgp-auth-revoke 1  "sshd-openpgp-auth-revoke " 
.SH NAME
sshd\-openpgp\-auth\-revoke \- Revoke subkeys of an OpenPGP certificate
.SH SYNOPSIS
\fBsshd\-openpgp\-auth revoke\fR [\fB\-a\fR|\fB\-\-all\fR] [\fB\-f\fR|\fB\-\-fingerprint\fR] [\fB\-m\fR|\fB\-\-message\fR] [\fB\-o\fR|\fB\-\-openpgp\-dir\fR] [\fB\-r\fR|\fB\-\-reason\fR] [\fB\-s\fR|\fB\-\-stdout\fR] [\fB\-S\fR|\fB\-\-subkey\-fingerprint\fR] [\fB\-t\fR|\fB\-\-time\fR] [\fB\-h\fR|\fB\-\-help\fR] 
.SH DESCRIPTION
.PP
Revoke subkeys of an OpenPGP certificate
.PP
By default this command revokes the subkeys of an OpenPGP certificate in /var/lib/sshd\-openpgp\-auth/.
If more than one OpenPGP certificate is found in the target directory, an OpenPGP fingerprint must be specified.
.PP
.SH OPTIONS
.TP
\fB\-a\fR, \fB\-\-all\fR
Revoke all subkeys of the chosen OpenPGP certificate
.TP
\fB\-f\fR, \fB\-\-fingerprint\fR=\fIFINGERPRINT\fR
An OpenPGP fingerprint to identify a specific certificate
.RS
May also be specified with the \fBSOA_FINGERPRINT\fR environment variable. 
.RE
.TP
\fB\-m\fR, \fB\-\-message\fR=\fIMESSAGE\fR
An optional message for the revocation
.RS
May also be specified with the \fBSOA_REVOCATION_MESSAGE\fR environment variable. 
.RE
.TP
\fB\-o\fR, \fB\-\-openpgp\-dir\fR=\fIDIR\fR
A custom directory in which to look for OpenPGP certificates (defaults to "/var/lib/sshd\-openpgp\-auth/")
.RS
May also be specified with the \fBSOA_OPENPGP_DIR\fR environment variable. 
.RE
.TP
\fB\-r\fR, \fB\-\-reason\fR=\fIREASON\fR
A custom revocation reason (defaults to "superseded").
One of "compromised" (Hard), "retired" (Soft), "superseded" (Soft).
.RS
May also be specified with the \fBSOA_REVOCATION_REASON\fR environment variable. 
.RE
.TP
\fB\-s\fR, \fB\-\-stdout\fR
Output the OpenPGP certificate to stdout instead of a file
.TP
\fB\-S\fR, \fB\-\-subkey\-fingerprint\fR=\fISUBKEY_FINGERPRINT\fR
An OpenPGP fingerprint to identify a specific subkey.
This option can be provided more than once
.RS
May also be specified with the \fBSOA_SUBKEY_FINGERPRINT\fR environment variable. 
.RE
.TP
\fB\-t\fR, \fB\-\-time\fR=\fITIME\fR
A custom reference time formatted as an RFC3339 string (defaults to now)
.RS
May also be specified with the \fBSOA_TIME\fR environment variable. 
.RE
.TP
\fB\-h\fR, \fB\-\-help\fR
Print help (see a summary with \*(Aq\-h\*(Aq)