SQ(1)

📦
version 1.5.0 · 4 versions
, in fedora 43, fedora 44, nixpkgs unstable, opensuse-leap 16.0

okay bestie, welcome to the Sequoia PGP corner of the manual, where the command is sq-network-dane-search and the vibe is immaculate. it lives under sq(1) obvi, and it's here to pull certificates for you using DANE. let's get into it 🦋

✨ NAME ✨

sq-network-dane-search — Retrieve certificates using DANE

like... that's it, that's the whole name. it retrieves certificates. using DANE. iconic behavior honestly 👑

🌸 SYNOPSIS 🌸

sq network dane search [OPTIONS] ADDRESS

you give it an ADDRESS, you sprinkle in some OPTIONS if you're feeling spicy, boom. 💅

🎀 DESCRIPTION 🎀

Retrieve certificates using DANE. no cap, that is the entire mission statement.

By default, any returned certificates are stored in the local certificate store. but — and this is the part where you get to have main character energy — you can override that whole behavior by using the --output option instead. your call, your rules. ✨

Now here's the lowkey unhinged part that you actually need to know. When a certificate is retrieved using DANE, and imported into the local certificate store, any User IDs with the email address that was looked up are certificated with a local DANE-specific key. That proxy certificate is in turn certified as a minimally trusted CA (trust amount: 1 of 120) by the local trust root. yes, 1 of 120, she's barely trusted, she's on probation fr fr 😭

how much the DANE proxy CA is trusted can be tuned using sq pki link add or sq pki link retract in the usual way. so if you want to adjust the vibe check on that trust level, that's your two levers. 🫶

💜 OPTIONS 💜

Subcommand options

  • --all — Fetch updates for all known certificates. not just one, all of them, go off king 👑
  • --output=FILE — Write to FILE (or stdout when omitted) instead of importing into the certificate store. so if FILE is not there, she just yells into stdout like it's a group chat. either way, it skips the whole importing-into-the-certificate-store situation. 💖
  • ADDRESS — Retrieve certificate(s) for ADDRESS. yes plural, certificates, because sometimes there is more than one and she is not gatekeeping. 🌈

Global options

See sq(1) for a description of the global options. bestie, the global options live over there, this is not their house. 🏠

🔥 EXAMPLES 🔥

Retrieve Alice's certificate over DANE.

sq network dane search alice@example.org

Retrieve updates for all known certificates over DANE.

sq network dane search --all

look at that. clean. effortless. she ate and left no crumbs 🍓

🌟 SEE ALSO 🌟

For the full documentation see <https://book.sequoia-pgp.org/>.

(the book!! go read the book!! it's giving homework but make it slay 📚✨)

⭐ VERSION ⭐

1.5.0

so yeah, that's the whole page. Sequoia PGP wrote her, she's version 1.5.0, and she's out here under the SQ(1) manual name doing DANE certificate retrieval like the absolute queen she is. no notes. periodt. 👑💅🦋

📦 where this page comes from