I'm using gnupg and I've just seen that people can sign keys with an expiration attached.

The expiration of individual signatures can be seen in gpg --list-sigs <KEY> when setting this in your .gnupg/gpg.conf:

list-options show-sig-expire

However, I can't find any information on how to add such an expiration to a signature.

How do I do that?


[Edit after the clarification]:

I believe you are looking for the "esoteric options of the GPG", you can have a look at them in here:


Specifically you are looking for the option:


Use it when issuing a new key.

  • 2
    --ask-cert-expire and/or --default-cert-expire – mr.spuratic Jan 16 '14 at 10:57

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.