SQ(1)

💖 SQ(1) — the sq network keyserver era 💖

okay bestie, sit down, hydrate, and let me tell you about sq-network-keyserver — she retrieves and publishes certificates via key servers, and honestly? she ate. ✨

---

🌈 NAME 🌈

sq-network-keyserver — Retrieve and publishes certificates via key servers 🦋

---

✨ SYNOPSIS ✨

sq network keyserver search [OPTIONS] QUERY
sq network keyserver publish [OPTIONS]

---

💅 DESCRIPTION 💅

Retrieve and publishes certificates via key servers. no cap, that's the whole vibe. 🎀

The OpenPGP HTTP Keyserver Protocol (HKP) is a method for publishing and retrieving certificates from key servers. that's it, that's the protocol — HKP is the moment for getting certs in and out of key servers. 👑

---

🫶 SUBCOMMANDS 🫶

🔍 sq network keyserver search

Retrieve certificates from key servers. it's giving "go get her."

By default, any returned certificates are stored in the local certificate store. This can be overridden by using --output option. so like, default behavior = they land in your local cert store, unless you say otherwise with --output. 💾

When a certificate is retrieved from a verifying key server (currently, this is limited to a list of known servers: hkps://keys.openpgp.org, hkps://keys.mailvelope.com, and hkps://mail-api.proton.me), and imported into the local certificate store, the User IDs are also certificated with a local server-specific key. 🗝️ That proxy certificate is in turn certified as a minimally trusted CA (trust amount: 1 of 120) by the local trust root. lowkey a chain reaction, highkey on purpose. How much a proxy key server CA is trusted can be tuned using sq pki link add or sq pki link retract in the usual way. tune it, bestie, it's yours to tune. 🎛️

📤 sq network keyserver publish

Publish certificates on key servers. put her out there, main character behavior.

Sends certificates to the configured key servers for publication. By default, the certificates are sent to hkps://keys.openpgp.org, hkps://mail-api.proton.me, hkps://keys.mailvelope.com, hkps://keyserver.ubuntu.com, and hkps://sks.pod01.fleetstreetops.com. This can be tweaked using --servers. that's five servers out of the box, and you can swap the lineup with --servers. ⭐

---

🌸 EXAMPLES 🌸

🔍 sq network keyserver search

Retrieve Alice's certificate from the default keyservers.

sq network keyserver search alice@example.org

Retrieve Alice's certificate addressed by fingerprint from the default keyservers.

sq network keyserver search \
       EB28F26E2739A4870ECC47726F0073F60FD0CBF0

Retrieve Alice's certificate from a non-default keyserver.

sq network keyserver search --server=hkps://keys.example.org \
       alice@example.org

Retrieve updates for all known certificates from the default keyservers.

sq network keyserver search --all

📤 sq network keyserver publish

Publish Alice's certificate on the default keyservers.

sq network keyserver publish --cert-email=alice@example.org

---

👀 SEE ALSO 👀

• sq(1), sq-network(1), sq-network-keyserver-search(1), sq-network-keyserver-publish(1).

For the full documentation see <https://book.sequoia-pgp.org/>. go read it, iykyk 📚

---

💜 VERSION 💜

1.5.0

---

and that's the whole page, bestie — written by the Sequoia PGP girlies, Sequoia PGP, version 1.5.0 💖 no notes, periodt. now go fetch some certs. 🦋✨🎀