SQ(1)

💖 SQ(1) — sq-key-approvals-update 💖

okay bestie, so this manual page is for sq-key-approvals-update — and before you ask, yes, the manual is called SQ and the section is 1. The command lives under sq key approvals update. Let's get into it ✨

🎀 NAME 🎀

sq-key-approvals-update — literally just says yes to third-party certifications so they can actually be distributed. giving approval vibes fr fr 💅

🦋 SYNOPSIS 🦋

sq key approvals update [OPTIONS]

🌸 DESCRIPTION 🌸

So here's the tea: this command approves of third-party certifications allowing for their distribution. That's the whole job. 👑

Why does anybody care? To prevent certificate flooding attacks, modern key servers don't just let third-party certifications on certificates float around uncontrolled. And to let the key holder control what info gets distributed alongside their certificate, these key servers only distribute third-party certifications that the key holder has explicitly approved. Like, consent only, no surprises. 🫶

By default, all user IDs are considered. But — and this is the plot twist — if you give at least one --name, --email, or --userid argument, only the matching user IDs get considered. narrow it down babes ✨

After the approvals have been changed, the certificate has to be distributed, e.g. by uploading it to a key server. Approving is not the finish line, it's the glow-up and then you have to go out. 💃

---

✨ OPTIONS ✨

💜 Subcommand options

• --add-all — Approve of all pending certifications. everything, all of it, no notes 💖
• --add-authenticated — Approve of all certifications by authenticated certifiers. For all pending approvals, try to authenticate any user ID on the certifier, and if any can be authenticated, approve of the certification. yes bestie, we're checking IDs at the door 🔥
• --add-by=FINGERPRINT|KEYID — Approve of all certifications by this certifier.
• --cert=FINGERPRINT|KEYID — List the approvals on the certificate with the specified fingerprint or key ID.
• --cert-email=EMAIL — List the approvals on the certificate where a user ID includes the specified email address.
• --cert-file=PATH — List the approvals on the certificate read from PATH.
• --cert-userid=USERID — List the approvals on the certificate with the specified user ID.
• --email=EMAIL — Use the self-signed user ID with the specified email address.
• --output=FILE — Write to the specified FILE. If not specified, and the certificate was read from the certificate store, imports the modified certificate into the cert store. If not specified, and the certificate was read from a file, writes the modified certificate to stdout. iykyk 🌈
• --remove-all — Remove all prior approvals. By default, this command adds to the set of already approved certifications. If this flag is given, the existing approvals are disregarded, and only the newly selected certifications are approved, if any. clean slate energy, periodt 💅
• --remove-by=FINGERPRINT|KEYID — Remove all prior approvals of certifications by this certifier.
• --userid=USERID — Use the specified self-signed user ID. The specified user ID must be self signed. no exceptions bestie 🚨

🌺 Global options

See sq(1) for a description of the global options. (yes, we're pointing you at the main character's page 👑)

---

💫 EXAMPLES 💫

Approve of all of the certifications on all of Alice's user IDs. 🎀

sq key approvals update --add-all \
       --cert=EB28F26E2739A4870ECC47726F0073F60FD0CBF0

Approve of all of the certifications on all of Alice's user IDs made by Bob, discarding all prior approvals first. 🦋

sq key approvals update --remove-all \
       --add-by=511257EBBF077B7AEDAE5D093F68CB84CE537C9A \
       --cert=EB28F26E2739A4870ECC47726F0073F60FD0CBF0

Approve of all of the certifications on a specific user ID by certifiers that can be authenticated, discarding all prior approvals first. 🔥

sq key approvals update --remove-all --add-authenticated \
       --cert=EB28F26E2739A4870ECC47726F0073F60FD0CBF0 \
       --userid="Alice <alice@example.org>"

Remove the approval of Bob's certification on all of Alice's user IDs. 💀

sq key approvals update \
       --remove-by=511257EBBF077B7AEDAE5D093F68CB84CE537C9A \
       --cert=EB28F26E2739A4870ECC47726F0073F60FD0CBF0

---

🌈 SEE ALSO 🌈

sq(1), sq-key(1), sq-key-approvals(1).

For the full documentation see <https://book.sequoia-pgp.org/>. go read it, it's giving academic but make it cute 📚✨

⭐ VERSION ⭐

1.5.0

---

and that's the whole page bestie!! this one came from Sequoia PGP, version 1.5.0, dated 1.5.0 — shoutout to them, we love a well-documented tool 💖 mwah, see you in the next manpage 🫶✨