home | help 
SQ(1)				  User Commands 			   SQ(1)

NAME
     sq-network-dane - Retrieve and publishes certificates via DANE

SYNOPSIS
     sq network dane search [OPTIONS] ADDRESS
     sq network dane generate [OPTIONS]

DESCRIPTION
     Retrieve and publishes certificates via DANE.

     DNS-Based	Authentication of Named Entities (DANE) is a method for publish-
     ing and retrieving certificates in DNS as specified in RFC 7929.

SUBCOMMANDS
   sq network dane search
     Retrieve certificates using DANE.

     By default, any returned certificates are stored in the  local  certificate
     store.  This can be overridden by using `--output` option.

     When  a  certificate  is  retrieved using DANE, and imported into the local
     certificate store, any User IDs with the email address that was  looked  up
     are certificated with a local DANE-specific key.  That proxy certificate is
     in turn certified as a minimally trusted CA (trust amount: 1 of 120) by the
     local trust root.	How much the DANE proxy CA is trusted can be tuned using
     `sq pki link add` or `sq pki link retract` in the usual way.

   sq network dane generate
     Generate DANE records for the given domain and certs.

     The  certificates	are minimized, and one record per email address is emit-
     ted.  If multiple user IDs map to one email address, then all matching user
     IDs are included in the emitted certificates.

     By default, OPENPGPKEY resource records are emitted.  If  your  DNS  server
     doesn't  understand those, use `--type generic` to emit generic records in-
     stead.

EXAMPLES
   sq network dane search
     Retrieve Alice's certificate over DANE.

	    sq network dane search alice@example.org

     Retrieve updates for all known certificates over DANE.

	    sq network dane search --all

   sq network dane generate
     Generate DANE records from juliet.pgp for example.org.

	    sq network dane generate --domain=example.org \
		   --cert-file=juliet.pgp

     Generate DANE records for all certs with an authenticated user ID in  exam-
     ple.org.

	    sq network dane generate --domain=example.org --all

SEE ALSO
     sq(1),		  sq-network(1),	      sq-network-dane-search(1),
     sq-network-dane-generate(1).

     For the full documentation see <https://book.sequoia-pgp.org/>.

VERSION
     1.3.1

Sequoia PGP			      1.3.1				   SQ(1)
home | help