public
/
docs
5
0
Fork 0
Code Issues 8 Pull Requests 2 Packages Projects Releases Wiki Activity

add keyfork env var for pgp key expiry

This commit is contained in:
Anton Livaja 2025-02-12 04:14:44 -05:00
parent 8e99d8f15b
commit 77891a686c
Signed by: anton
GPG Key ID: 44A86CFF1FDF0E85
1 changed files with 8 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
quorum-vault-system/src/component-documents/openpgp-setup.md
View File

@ -36,13 +36,19 @@ as such need to be set up in a manner that minimizes exposure risks.
``` ```
Note: default admin PIN is 12345678 Note: default admin PIN is 12345678
1. Set expiry time via environment variable - you can update 2y to desired value:
```
$ export KEYFORK_OPENPGP_EXPIRE=2y
```
1. Generate a mnemonic, encrypting to a newly-generated key: 1. Generate a mnemonic, encrypting to a newly-generated key:
``` ```
$ keyfork mnemonic generate --encrypt-to-self public.asc,output=private.asc --provision openpgp-card,identifier="$card_id" $ keyfork mnemonic generate --encrypt-to-self public.asc,output=private.asc --provision openpgp-card,identifier="$card_id"
``` ```
Note: The PIN can't use sequential numbers, characters or repeated patterns. Note: The PIN can't use sequential numbers, characters or repeated patterns.
1. Rename output to use key fingerprint: 1. Rename output to use key fingerprint: