sq-key-approvals-update1
Approves of third-party certifications allowing for their distribution
Usage
sq key
approvals
update
[OPTIONS]
Overview
Approves of third-party certifications allowing for their distribution.
To prevent certificate flooding attacks, modern key servers prevent uncontrolled distribution of third-party certifications on certificates. To allow the key holder to control what information is distributed with their certificate, these key servers only distribute third-party certifications that the key holder has explicitly approved.
By default, all user IDs are considered, but if at least one `--name`, `--email`, or `--userid` argument is given, only the matching user IDs are considered.
After the approvals have been changed, the certificate has to be distributed, e.g. by uploading it to a key server.
Options
Subcommand options
-
--add-all -
Approve of all pending certifications
-
--add-authenticated -
Approve of all certifications by authenticated certifiers
-
For all pending approvals, try to authenticate any user ID on the certifier, and if any can be authenticated, approve of the certification.
-
--add-by=FINGERPRINT|KEYID -
Approve of all certifications by this certifier
-
--cert=FINGERPRINT|KEYID -
List the approvals on the certificate with the specified fingerprint or key ID
-
--cert-email=EMAIL -
List the approvals on the certificate where a user ID includes the specified email address
-
--cert-file=PATH -
List the approvals on the certificate read from PATH
-
--cert-userid=USERID -
List the approvals on the certificate with the specified user ID
-
--email=EMAIL -
Use the self-signed user ID with the specified email address
-
--output=FILE -
Write to the specified FILE
-
If not specified, and the certificate was read from the certificate store, imports the modified certificate into the cert store. If not specified, and the certificate was read from a file, writes the modified certificate to stdout.
-
--remove-all -
Remove all prior approvals
-
By default, this command adds to the set of already approved certifications. If this flag is given, the existing approvals are disregarded, and only the newly selected certifications are approved, if any.
-
--remove-by=FINGERPRINT|KEYID -
Remove all prior approvals of certifications by this certifier
-
--userid=USERID -
Use the specified self-signed user ID
-
The specified user ID must be self signed.
Global options
See sq(1) for a description of the global options.
Examples
Approve of all of the certifications on all of Alice's user IDs.
sq key approvals update --add-all \ --cert=EB28F26E2739A4870ECC47726F0073F60FD0CBF0
Approve of all of the certifications on all of Alice's user IDs made by Bob, discarding all prior approvals first.
sq key approvals update --remove-all \ --add-by=511257EBBF077B7AEDAE5D093F68CB84CE537C9A \ --cert=EB28F26E2739A4870ECC47726F0073F60FD0CBF0
Approve of all of the certifications on a specific user ID by certifiers that can be authenticated, discarding all prior approvals first.
sq key approvals update --remove-all --add-authenticated \ --cert=EB28F26E2739A4870ECC47726F0073F60FD0CBF0 \ --userid="Alice <[email protected]>"
Remove the approval of Bob's certification on all of Alice's user IDs.
sq key approvals update \ --remove-by=511257EBBF077B7AEDAE5D093F68CB84CE537C9A \ --cert=EB28F26E2739A4870ECC47726F0073F60FD0CBF0
Version
1.4.1
Releases
2 releases since Debian 13 (Trixie); the text changed 1 time.