Revocation certificate still valid after changing subkeys?

David Shaw dshaw at
Mon Apr 18 18:18:35 CEST 2005

On Mon, Apr 18, 2005 at 05:11:10PM +0100, Adam Funk wrote:
> When I created my keypair I dutifully created and safely stored a
> revocation certificate for it.
> I recently added a new subkey and revoked the old subkey (as discussed
> on this list).  I've also added and revoked a few UIDs since the key
> was created.
> Is there any reason to generate a new revocation certificate? Or does
> it apply directly to the master key only?

It applies to the master key only.  You do not need to generate a new
revocation certificate.  Revoking the master key takes out all UIDs
and subkeys in one step.


More information about the Gnupg-users mailing list