Skip site navigation (1)Skip section navigation (2)

FreeBSD Manual Pages

  
 
  

home | help
SQ(1)				 User Commands				 SQ(1)

NAME
       sq-key-approvals-update - Approves of third-party certifications	allow-
       ing for their distribution

SYNOPSIS
       sq key approvals	update [OPTIONS]

DESCRIPTION
       Approves	of third-party certifications allowing for their distribution.

       To prevent certificate flooding attacks,	modern key servers prevent un-
       controlled  distribution	of third-party certifications on certificates.
       To allow	the key	holder to control what information is distributed with
       their certificate, these	key servers only distribute third-party	certi-
       fications that the key holder has explicitly approved.

       By default, all user IDs	are considered,	but if at least	one  `--name`,
       `--email`,  or `--userid` argument is given, only the matching user IDs
       are considered.

       After the approvals have	been changed, the certificate has to  be  dis-
       tributed, e.g. by uploading it to a key server.

OPTIONS
   Subcommand options
       --add-all
	      Approve of all pending certifications

       --add-authenticated
	      Approve of all certifications by authenticated certifiers

	      For  all	pending	 approvals, try	to authenticate	any user ID on
	      the certifier, and if any	can be authenticated, approve  of  the
	      certification.

       --add-by=FINGERPRINT|KEYID
	      Approve of all certifications by this certifier

       --cert=FINGERPRINT|KEYID
	      List the approvals on the	certificate with the specified finger-
	      print or key ID

       --cert-email=EMAIL
	      List  the	 approvals on the certificate where a user ID includes
	      the specified email address

       --cert-file=PATH
	      List the approvals on the	certificate read from PATH

       --cert-userid=USERID
	      List the approvals on the	certificate with the specified user ID

       --email=EMAIL
	      Use the self-signed user ID with the specified email address

       --output=FILE
	      Write to the specified FILE

	      If not specified,	and the	certificate was	read from the certifi-
	      cate store, imports  the	modified  certificate  into  the  cert
	      store.   If  not	specified, and the certificate was read	from a
	      file, writes the modified	certificate to stdout.

       --remove-all
	      Remove all prior approvals

	      By default, this command adds to the  set	 of  already  approved
	      certifications.	If  this flag is given,	the existing approvals
	      are disregarded, and only	the newly selected certifications  are
	      approved,	if any.

       --remove-by=FINGERPRINT|KEYID
	      Remove all prior approvals of certifications by this certifier

       --userid=USERID
	      Use the specified	self-signed user ID

	      The specified user ID must be self signed.

   Global options
       See sq(1) for a description of the global options.

EXAMPLES
       Approve of all of the certifications on all of Alice's user IDs.

	      sq key approvals update --add-all	\
		     --cert=EB28F26E2739A4870ECC47726F0073F60FD0CBF0

       Approve of all of the certifications on all of Alice's user IDs made by
       Bob, discarding all prior approvals first.

	      sq key approvals update --remove-all \
		     --add-by=511257EBBF077B7AEDAE5D093F68CB84CE537C9A \
		     --cert=EB28F26E2739A4870ECC47726F0073F60FD0CBF0

       Approve	of  all	 of the	certifications on a specific user ID by	certi-
       fiers that can be authenticated,	discarding all prior approvals first.

	      sq key approvals update --remove-all --add-authenticated \
		     --cert=EB28F26E2739A4870ECC47726F0073F60FD0CBF0 \
		     --userid="Alice <alice@example.org>"

       Remove the approval of Bob's certification on all of Alice's user IDs.

	      sq key approvals update \
		     --remove-by=511257EBBF077B7AEDAE5D093F68CB84CE537C9A \
		     --cert=EB28F26E2739A4870ECC47726F0073F60FD0CBF0

SEE ALSO
       sq(1), sq-key(1), sq-key-approvals(1).

       For the full documentation see <https://book.sequoia-pgp.org/>.

VERSION
       1.3.1

Sequoia	PGP			     1.3.1				 SQ(1)

Want to link to this manual page? Use this URL:
<https://man.freebsd.org/cgi/man.cgi?query=sq-key-approvals-update&sektion=1&manpath=FreeBSD+Ports+15.0.quarterly>

home | help