GPG - Revocation Certificate

[last updated: 2023-07-05]
GPG - generate public & private keys
GPG encryption home page
-----

• Create the certificate:
  • I'm confused about the need for a separate command to do this,
    since terminal printout from howtogeek link says the revoc certif was created already
    with the full-generate command ...
  • Regardless, to manually create the certificate:
    $ gpg --output ~/revocation.crt --gen-revoke [ email ]

    The "revocation.crt" filename is arbitrary and chosen/defined by you. It will define the name of
    the revocation certificate file that you are creating.
    You must include the email address that you used when you first generated the key.

• Protect/save the certificate:
  Remove all permissions from the certificate except the owner:
  $ chmod 600 ~/revocation.crt

• Execute the certificate:
  ... when needed ...