home | help
SQ(1)				  User Commands 			   SQ(1)

NAME
     sq-network-wkd-publish - Publish certificates in a Web Key Directory

SYNOPSIS
     sq network wkd publish [OPTIONS] DEST

DESCRIPTION
     Publish certificates in a Web Key Directory.

     Publishes certificates or certificate updates in a Web Key Directory (WKD).
     You  can create or update a WKD hierarchy on the local system by specifying
     a path as destination.

     Typically, a WKD is stored on a web server.  If `--rsync`	is  given,  this
     command manages remote WKD directory hierarchies by using rsync(1).

     To insert a new certificate into the WKD, use `--cert`.

     Any  updates for certificates already existing in the WKD are automatically
     published.

     Note: To update a WKD hierarchy, it is first copied to a temporary location
     on the local machine, new certificates or certificate updates are	inserted
     into the local copy, and the hierarchy is copied back to its original loca-
     tion.  As this is not an atomic operation, care must be taken to avoid con-
     current updates.

OPTIONS
   Subcommand options
     --all  Publish authenticated certs with a user ID matching domain

	    Use  all  certificates that have a user ID matching the domain given
	    to the `--domain` parameter that can be fully authenticated.

     --cert=FINGERPRINT|KEYID
	    Use certificates with the specified fingerprint or key ID

     --cert-email=EMAIL
	    Use certificates where a user ID includes the  specified  email  ad-
	    dress

     --cert-file=PATH
	    Read certificates from PATH

     --cert-userid=USERID
	    Use certificates with the specified user ID

     --create
	    Create the WKD hierarchy if it does not exist yet

     --domain=FQDN
	    Generate a WKD for a fully qualified domain name for email

     --method=METHOD
	    Select kind of WKD hierarchy to be created

	    The  advanced  method, which is the default and should be preferred,
	    is hosted on a separate domain (e.g. openpgpkey.example.org).

	    The direct method is hosted on the same domain (e.g. example.org).

	    [possible values: advanced, direct]

     --rsync
	    Use rsync(1) to access DEST

     --rsync-path=RSYNC
	    Path to the local rsync command to use, implies --rsync

      DEST  Location of the WKD on the local or remote machine

	    If --rsync is given, this is passed as-is to rsync(1).

   Global options
     See sq(1) for a description of the global options.

EXAMPLES
     Create a new WKD hierarchy in the local directory `public_html`, and insert
     Alice's cert.

	    sq network wkd publish --create \
		   --cert=EB28F26E2739A4870ECC47726F0073F60FD0CBF0 \
		   --domain=example.org public_html

     Add Bob's cert to the existing WKD hierarchy in the local	directory  `pub-
     lic_html`.

	    sq network wkd publish \
		   --cert=511257EBBF077B7AEDAE5D093F68CB84CE537C9A \
		   --domain=example.org public_html

     Add  all certs with an authenticated user ID in example.org to the existing
     WKD hierarchy.

	    sq network wkd publish --domain=example.org --all public_html

     Refresh all certs in the existing WKD  hierarchy  in  the	local  directory
     `public_html` from the cert store.

	    sq network wkd publish --domain=example.org public_html

SEE ALSO
     sq(1), sq-network(1), sq-network-wkd(1).

     For the full documentation see <https://book.sequoia-pgp.org/>.

VERSION
     1.3.1

Sequoia PGP			      1.3.1				   SQ(1)

home | help