home | help
SQ(1)				  User Commands 			   SQ(1)

NAME
     sq-network-keyserver - Retrieve and publishes certificates via key servers

SYNOPSIS
     sq network keyserver search [OPTIONS] QUERY
     sq network keyserver publish [OPTIONS]

DESCRIPTION
     Retrieve and publishes certificates via key servers.

     The  OpenPGP  HTTP  Keyserver Protocol (HKP) is a method for publishing and
     retrieving certificates from key servers.

SUBCOMMANDS
   sq network keyserver search
     Retrieve certificates from key servers.

     By default, any returned certificates are stored in the  local  certificate
     store.  This can be overridden by using `--output` option.

     When  a  certificate  is  retrieved from a verifying key server (currently,
     this is limited to a  list  of  known  servers:  `hkps://keys.openpgp.org`,
     `hkps://keys.mailvelope.com`,  and  `hkps://mail-api.proton.me`),	and  im-
     ported into the local certificate store, the User IDs are also certificated
     with a local server-specific key.	That proxy certificate is in turn certi-
     fied as a minimally trusted CA (trust amount: 1 of 120) by the local  trust
     root.  How much a proxy key server CA is trusted can be tuned using `sq pki
     link add` or `sq pki link retract` in the usual way.

   sq network keyserver publish
     Publish certificates on key servers.

     Sends  certificates  to the configured key servers for publication.  By de-
     fault,   the   certificates   are	 sent	to    `hkps://keys.openpgp.org`,
     `hkps://mail-api.proton.me`,   `hkps://keys.mailvelope.com`,   `hkps://key-
     server.ubuntu.com`, and `hkps://sks.pod01.fleetstreetops.com`.  This can be
     tweaked using `--servers`.

EXAMPLES
   sq network keyserver search
     Retrieve Alice's certificate from the default keyservers.

	    sq network keyserver search alice@example.org

     Retrieve Alice's certificate addressed by fingerprint from the default key-
     servers.

	    sq network keyserver search \
		   EB28F26E2739A4870ECC47726F0073F60FD0CBF0

     Retrieve Alice's certificate from a non-default keyserver.

	    sq network keyserver search --server=hkps://keys.example.org \
		   alice@example.org

     Retrieve updates for all known certificates from the default keyservers.

	    sq network keyserver search --all

   sq network keyserver publish
     Publish Alice's certificate on the default keyservers.

	    sq network keyserver publish --cert-email=alice@example.org

SEE ALSO
     sq(1),	       sq-network(1),		 sq-network-keyserver-search(1),
     sq-network-keyserver-publish(1).

     For the full documentation see <https://book.sequoia-pgp.org/>.

VERSION
     1.3.1

Sequoia PGP			      1.3.1				   SQ(1)

home | help