sq-network-keyserver-search1
Retrieve certificates from key servers
Usage
sq network
keyserver
search
[OPTIONS]
QUERY
Overview
Retrieve certificates from key servers.
By default, any returned certificates are stored in the local certificate store. This can be overridden by using `--output` option.
When a certificate is retrieved from a verifying key server (currently, this is limited to a list of known servers: `hkps://keys.openpgp.org`, `hkps://keys.mailvelope.com`, and `hkps://mail-api.proton.me`), and imported into the local certificate store, the User IDs are also certificated with a local server-specific key. That proxy certificate is in turn certified as a minimally trusted CA (trust amount: 1 of 120) by the local trust root. How much a proxy key server CA is trusted can be tuned using `sq pki link add` or `sq pki link retract` in the usual way.
Options
Subcommand options
-
--all -
Fetch updates for all known certificates
-
--output=FILE -
Write to FILE (or stdout when omitted) instead of importing into the certificate store
-
--server=URI -
Set a key server to use (can be given multiple times)
-
The default can be changed in the configuration file using the setting `network.keyserver.servers`.
-
[default:
hkps://keys.openpgp.org,hkps://mail-api.proton.me,hkps://keys.mailvelope.com,hkps://keyserver.ubuntu.com,hkps://sks.pod01.fleetstreetops.com]
- QUERY
-
Retrieve certificate(s) using QUERY
-
This may be a fingerprint, a KeyID, or an email address.
Global options
See sq(1) for a description of the global options.
Examples
Retrieve Alice's certificate from the default keyservers.
sq network keyserver search [email protected]
Retrieve Alice's certificate addressed by fingerprint from the default keyservers.
sq network keyserver search \ EB28F26E2739A4870ECC47726F0073F60FD0CBF0
Retrieve Alice's certificate from a non-default keyserver.
sq network keyserver search --server=hkps://keys.example.org \ [email protected]
Retrieve updates for all known certificates from the default keyservers.
sq network keyserver search --all
Version
1.4.1
Releases
2 releases since Debian 13 (Trixie); the text changed 1 time.