sq-network-wkd-search1
Retrieve certificates from a web key directory
Usage
sq network
wkd
search
[OPTIONS]
ADDRESS
Overview
Retrieve certificates from a Web Key Directory.
By default, any returned certificates are stored in the local certificate store. This can be overridden by using `--output` option.
When a certificate is retrieved from a WKD, and imported into the local certificate store, any User IDs with the email address that was looked up are certificated with a local WKD-specific key. That proxy certificate is in turn certified as a minimally trusted CA (trust amount: 1 of 120) by the local trust root. How much the WKD proxy CA is trusted can be tuned using `sq pki link add` or `sq pki link retract` in the usual way.
Options
Subcommand options
-
--all -
Fetch updates for all known certificates
-
--output=FILE -
Write to FILE (or stdout when omitted) instead of importing into the certificate store
- ADDRESS
-
Retrieve certificate(s) for ADDRESS
Global options
See sq(1) for a description of the global options.
Examples
Retrieve Alice's certificate over WKD.
sq network wkd search [email protected]
Retrieve updates for all known certificates over WKD.
sq network wkd search --all
Version
1.4.1
Releases
2 releases since Debian 13 (Trixie); the text changed 1 time.