SQ(1)

📦
version 1.5.0 · 4 versions
, in fedora 43, fedora 44, nixpkgs unstable, opensuse-leap 16.0

💖 SQ(1) — bestie we're doing DNS + PGP and it's a whole vibe 💖

okay so listen. this is sq-network-dane-generate, and it lives inside the SQ(1) manual, and honestly? it's giving cryptography girlboss. you hand it a domain and some certs, it hands you back DANE records. no cap. 🦋

✨ NAME ✨

sq-network-dane-generate — Generate DANE records for the given domain and certs 💅

📜 SYNOPSIS 📜

sq network dane generate [OPTIONS]

🌸 DESCRIPTION 🌸

Generate DANE records for the given domain and certs. that's it, that's the mission, and she ate. 🔥

The certificates are minimized, and one record per email address is emitted. and the way that works?? if multiple user IDs map to one email address, then all matching user IDs are included in the emitted certificates. so you're not losing anybody, everybody shows up, iconic behavior fr fr.

By default, OPENPGPKEY resource records are emitted. but bestie, if your DNS server doesn't understand those, use --type generic to emit generic records instead. problem solved, slay. ✨

🎀 OPTIONS 🎀

💜 Subcommand options 💜

  • --all — Publish authenticated certs with a user ID matching domain.

Use all certificates that have a user ID matching the domain given to the --domain parameter that can be fully authenticated. lowkey the easy-mode flag: give her a domain, she finds the certs. 👑

  • --cert=FINGERPRINT|KEYID — Use certificates with the specified fingerprint or key ID.

you got a fingerprint? a key ID? drop it here, she knows. 💖

  • --cert-email=EMAIL — Use certificates where a user ID includes the specified email address.

matching by email address inside a user ID. very "found you in the contacts app" energy. 🍓

  • --cert-file=PATH — Read certificates from PATH.

point her at a file, she'll read it. simple as. 📁

  • --cert-userid=USERID — Use certificates with the specified user ID.

yes, exactly what it says, the user ID match, and it's literally that. 💅

  • --domain=FQDN — Generate DANE records for this domain name.

the main character argument, honestly. without this one we're just vibing with no direction. 🌈

  • --size-limit=BYTES — Try to shrink the certificates to this size.

[default: 12288]

she's gonna try to shrink to this size. emphasis on try, we don't make promises we can't keep. 😭

  • --ttl=DURATION — Set the TTL (maximum cache duration) of the resource records.

[default: 10800]

how long DNS gets to remember this before it forgets. short attention span settings go here. 🧚

  • --type=TYPE — Change the emitted resource record type.

[default: openpgp]

[possible values: openpgp, generic]

the vibe check of record types: openpgp for servers who speak the language, generic for servers who absolutely do not. 💀

🌟 Global options 🌟

See sq(1) for a description of the global options. (yes bestie, there's a whole other manual, she's thorough like that.) 🫶

💫 EXAMPLES 💫

Generate DANE records from juliet.pgp for example.org. 🎀

sq network dane generate --domain=example.org \
       --cert-file=juliet.pgp

Generate DANE records for all certs with an authenticated user ID in example.org. 👑

sq network dane generate --domain=example.org --all

🔍 SEE ALSO 🔍

For the full documentation see <https://book.sequoia-pgp.org/>. ✨

⭐ VERSION ⭐

1.5.0

💖 so yeah. that's the whole page. keep your details, keep your flags, keep your exact commands — the vibe is the only thing we changed, and honestly, we upgraded it. 💖

and that's a wrap, bestie 🫶 this was Sequoia PGP, version 1.5.0, stamped 1.5.0, and you're officially done reading. go publish some DANE records, you absolute legend. no cap, periodt. 👑💅🦋

📦 where this page comes from