Manpage logo

sq-network-keyserver - Retrieve and publishes certificates via key servers

NAME  SYNOPSIS  DESCRIPTION  SUBCOMMANDS  sq network keyserver search  sq network keyserver publish  EXAMPLES  sq network keyserver search  sq network keyserver publish  SEE ALSO  VERSION 

NAME

sq−network−keyserver − Retrieve and publishes certificates via key servers

SYNOPSIS

sq network keyserver search [OPTIONS] QUERY
sq network keyserver publish
[OPTIONS]

DESCRIPTION

Retrieve and publishes certificates via key servers.

The OpenPGP HTTP Keyserver Protocol (HKP) is a method for publishing and retrieving certificates from key servers.

SUBCOMMANDS

sq network keyserver search

Retrieve certificates from key servers.

By default, any returned certificates are stored in the local certificate store. This can be overridden by using ‘−−output‘ option.

When a certificate is retrieved from a verifying key server (currently, this is limited to a list of known servers: ‘hkps://keys.openpgp.org‘, ‘hkps://keys.mailvelope.com‘, and ‘hkps://mail−api.proton.me‘), and imported into the local certificate store, the User IDs are also certificated with a local server−specific key. That proxy certificate is in turn certified as a minimally trusted CA (trust amount: 1 of 120) by the local trust root. How much a proxy key server CA is trusted can be tuned using ‘sq pki link add‘ or ‘sq pki link retract‘ in the usual way.

sq network keyserver publish

Publish certificates on key servers.

Sends certificates to the configured key servers for publication. By default, the certificates are sent to ‘hkps://keys.openpgp.org‘, ‘hkps://mail−api.proton.me‘, ‘hkps://keys.mailvelope.com‘, ‘hkps://keyserver.ubuntu.com‘, and ‘hkps://sks.pod01.fleetstreetops.com‘. This can be tweaked using ‘−−servers‘.

EXAMPLES

sq network keyserver search

Retrieve Alice’s certificate from the default keyservers.

sq network keyserver search [email protected]

Retrieve Alice’s certificate addressed by fingerprint from the default keyservers.

sq network keyserver search \

EB28F26E2739A4870ECC47726F0073F60FD0CBF0

Retrieve Alice’s certificate from a non−default keyserver.

sq network keyserver search −−server=hkps://keys.example.org \

[email protected]

Retrieve updates for all known certificates from the default keyservers.

sq network keyserver search −−all

sq network keyserver publish

Publish Alice’s certificate on the default keyservers.

sq network keyserver publish −−cert−[email protected]

SEE ALSO

sq(1), sq−network(1), sq−network−keyserver−search(1), sq−network−keyserver−publish(1).

For the full documentation see <https://book.sequoia−pgp.org/>.

VERSION

1.3.1


Updated 2026-06-01 - jenkler.se | uex.se