gpgv-sq(1)

💖 NAME 💖

gpgv-sq — she verifies OpenPGP signatures, just like gpgv does. That's it, that's the whole job, and she ate. 💅

---

✨ SYNOPSIS ✨

gpgv-sq [-v|--verbose] [-q|--quiet] [--keyring] [-o|--output]
[--ignore-time-conflict] [--status-fd] [--weak-digest] [-h|--help]
[-V|--version] [SIG-FILE] [DATA-FILE]

---

🦋 DESCRIPTION 🦋

Okay so bestie, listen: this is a re-implementation and a drop-in replacement of gpgv, built on the Sequoia OpenPGP implementation. Same energy, new engine. 🔥

And like… gpgv-sq is feature-complete. Periodt. So if you swap out your old gpgv for gpgv-sq and literally anything goes sideways, please report any problems you encounter — she wants to know, fr fr. 🫶

---

👑 OPTIONS 👑

• -h, --help — prints the help. (Pro tip: it gives you a summary with -h.) 💖
• -V, --version — prints the version. iconic.
• [SIG-FILE] — the signatures, or the inline-signed message, you wanna verify. If you don't hand her one, or you literally pass -, she reads the signature (or the inline-signed message) straight from stdin. no cap.
• [DATA-FILE] — if your SIG-FILE is a detached signature, then DATA-FILE is the data that signature is supposed to be protecting. And if you give this one multiple times? The signature is assumed to cover the concatenation of all the files. 🧚

---

💜 OPTIONS: THE SEQUEL 💜

• -v, --verbose — verbose. she talks more. 🗣️
• -q, --quiet — be somewhat more quiet. she talks less. 🤫
• --keyring <FILE> — take the keys from the keyring FILE. 🔑
• -o, --output <FILE> — write output to FILE. 📝
• --ignore-time-conflict — makes timestamp conflicts only a warning instead of a whole dramatic situation.
• --status-fd <FD> — write status info to this FD.
• --weak-digest <ALGO> — reject signatures made with ALGO. blocked, blocked, blocked. 🚫

---

🌈 ENVIRONMENT 🌈

• GNUPGHOME — if it's set, it must contain an absolute path to a directory holding the GnuPG state, i.e. the configuration files, the cert rings, the secret keys, and the trust database. You can override it with the option --gnupghome. If it's unset and the option --gnupghome isn't given either, it defaults to $HOME/.gnupg. And just so we're clear: down in the FILES section below, $GNUPGHOME means the location of the GnuPG state directory, no matter how it got set — unset, set via --gnupghome, or set via $GNUPGHOME. iykyk. 💫
• SEQUOIA_CRYPTO_POLICY — if it's set, it must contain an absolute path to a configuration file that changes which cryptographic algorithms are acceptable. By default, /etc/crypto-policies/back-ends/sequoia.config gets read — which on Fedora contains a reasonable policy set by the distribution. See https://docs.rs/sequoia-policy-config/latest/sequoia_policy_config/#format for a description of the file format. 📚

---

🎀 FILES 🎀

• $GNUPGHOME/trustedkeys.kbx — the default set of trusted certificates. your ride or die list. 🫶
• $GNUPGHOME/trustedkeys.gpg — the legacy default set of trusted certificates. This file is read if trustedkeys.kbx does not exist. vintage, but valid. ✨
• /etc/crypto-policies/back-ends/sequoia.config — the default cryptographic policy. On Fedora, this contains a reasonable policy set by the distribution. Can be overridden using the SEQUOIA_POLICY_CONFIG environment variable. See https://docs.rs/sequoia-policy-config/latest/sequoia_policy_config/#format for a description of the file format. 🍓

---

⭐ VERSION ⭐

v0.13.1

---

okay that's the whole page bestie, go verify something and slay 💅✨

and that's a wrap on the gpgv-sq(1) page from the General Commands Manual — version 0.13.1 (v0.13.1), shipped as gpgv-sq 0.13.1. mwah, stan her, bye. 💖🎀🦋