Skip site navigation (1)Skip section navigation (2)

FreeBSD Manual Pages

  
 
  

home | help
SQ(1)				 User Commands				 SQ(1)

NAME
       sq-pki-link-retract - Retract links

SYNOPSIS
       sq pki link retract [OPTIONS]

DESCRIPTION
       Retract links.

       This  command retracts links that were previously created using `sq pki
       link add` or `sq	pki link authorize`.  See that subcommand's documenta-
       tion for	more details. Note: this is called `retract` and not `remove`,
       because the certifications are not removed.  Instead a  new  certifica-
       tion is added, which says that the binding has not been authenticated.

       `sq  pki	link retract` respects the reference time set by the top-level
       `--time`	argument.  This	causes a link to be retracted as of a particu-
       lar time	instead	of the current time.

OPTIONS
   Subcommand options
       --all  Use all self-signed user IDs

       --cert=FINGERPRINT|KEYID
	      Use certificates with the	specified fingerprint or key ID

       --cert-special=SPECIAL
	      Use certificates identified by the special name

	      [possible	   values:    public-directories,    keys.openpgp.org,
	      keys.mailvelope.com, proton.me, wkd, dane, autocrypt, web]

       --email=EMAIL
	      Use a user ID with the specified email address

	      The  user	 ID consists of	just the email address.	 The email ad-
	      dress does not have to appear in a self-signed user ID.

       --recreate
	      Recreate signature even if the parameters	did not	change

	      If the link parameters did not change, and thus creating a  sig-
	      nature  should  not  be  necessary, we omit the operation.  This
	      flag can be given	to force the signature to be  re-created  any-
	      way.

       --signature-notation NAME VALUE
	      Add a notation to	the signature

	      A	 user-defined  notation's name must be of the form `name@a.do-
	      main.you.control.org`. If	the notation's name starts with	a `!`,
	      then the notation	is marked as being critical.  If a consumer of
	      a	signature doesn't understand a critical	notation, then it will
	      ignore the signature.  The notation is  marked  as  being	 human
	      readable.

       --userid=USERID
	      Use the specified	user ID

	      The specified user ID does not need to be	self signed.

	      Because  using a user ID that is not self-signed is often	a mis-
	      take, you	need to	use this option	to explicitly opt in.

       --userid-by-email=EMAIL
	      Use the self-signed user ID with the specified email address

   Global options
       See sq(1) for a description of the global options.

EXAMPLES
       Link the	certificate EB28F26E2739A4870ECC47726F0073F60FD0CBF0 with  the
       email address alice@example.org.

	      sq pki link add \
		     --cert=EB28F26E2739A4870ECC47726F0073F60FD0CBF0 \
		     --add-email=alice@example.org

       Retract		the	     acceptance		of	   certificate
       EB28F26E2739A4870ECC47726F0073F60FD0CBF0	 and  the  email  address  al-
       ice@example.org.

	      sq pki link retract \
		     --cert=EB28F26E2739A4870ECC47726F0073F60FD0CBF0 \
		     --email=alice@example.org

       Retract		the	     acceptance		of	   certificate
       EB28F26E2739A4870ECC47726F0073F60FD0CBF0	and any	associated  user  IDs.
       This effectively	invalidates all	links.

	      sq pki link retract \
		     --cert=EB28F26E2739A4870ECC47726F0073F60FD0CBF0 --all

SEE ALSO
       sq(1), sq-pki(1), sq-pki-link(1).

       For the full documentation see <https://book.sequoia-pgp.org/>.

VERSION
       1.3.1

Sequoia	PGP			     1.3.1				 SQ(1)

Want to link to this manual page? Use this URL:
<https://man.freebsd.org/cgi/man.cgi?query=sq-pki-link-retract&sektion=1&manpath=FreeBSD+Ports+15.0.quarterly>

home | help