Is it possible to extend the openPGP key pair's expire time?

[TommyLike]

Can we extend the key pair's expire time by using this library?

[dignifiedquire]

I don't actually know how this works in general, do you have a link to some documentation how this would work?

[TommyLike]

@dignifiedquire I guess it's supported by pgp command, theres is another script which utilize on the command:

https://github.com/fedora-copr/copr/blob/700a02ae7f8aed6f827a1b593ba1872c55e6b919/keygen/run/gpg-copr-prolong#L3

[hko-s]

Expiration time (and other metadata) in OpenPGP is updated when the key holder issues new self-signatures. The new self-signatures replace the previous metadata.

See https://openpgp.dev/book/signing_components.html#adding-global-metadata-to-a-certificate for rough pointers.

Note that primary key and subkeys have subtly different mechanisms for how metadata is linked to them (and that the primary and each subkey can have independent expiration times).