sq-sign1
Sign messages or data files
Usage
sq sign
[OPTIONS]
FILE
Overview
Sign messages or data files.
Creates signed messages or detached signatures. Detached signatures are often used to sign software packages.
The converse operation is `sq verify`.
`sq sign` respects the reference time set by the top-level `--time` argument. When set, it uses the specified time instead of the current time, when determining what keys are valid, and it sets the signature's creation time to the reference time instead of the current time.
Options
Subcommand options
-
--append -
Append a signature to existing signature
-
--binary -
Emit binary data
-
--cleartext -
Create a cleartext-signed message
-
--merge=SIGNED-MESSAGE -
Merge signatures from the input and SIGNED-MESSAGE
-
--message -
Create an inline-signed message
-
--mode=MODE -
Select the signature mode
-
Signatures can be made in binary mode or in text mode. Text mode normalizes line endings, which makes signatures more robust when a text is transported over a channel which may change line endings. In doubt, create binary signatures.
-
[default:
binary]
-
[possible values:
binary,text]
-
--output=FILE -
Write to FILE or stdout if omitted
-
[default:
-]
-
--signature-file=SIG -
Create a detached signature file
--signature-notationNAME VALUE-
Add a notation to the signature
-
A user-defined notation's name must be of the form `[email protected]`. If the notation's name starts with a `!`, then the notation is marked as being critical. If a consumer of a signature doesn't understand a critical notation, then it will ignore the signature. The notation is marked as being human readable.
-
--signer=FINGERPRINT|KEYID -
Create the signature using the key with the specified fingerprint or key ID
-
--signer-email=EMAIL -
Create the signature using the key where a user ID includes the specified email address
-
--signer-file=PATH -
Create the signature using the key read from PATH
-
--signer-self -
Sign using your default signer keys
-
This adds the certificates listed in the configuration file under `sign.signer-self` to the list of signer keys.
-
Currently, the list of keys to be added is empty.
-
--signer-userid=USERID -
Create the signature using the key with the specified user ID
FILE
|
Read from FILE or stdin if FILE is '-' |
|---|---|
|
[default: |
Global options
See sq(1) for a description of the global options.
Examples
Create a signed message.
sq sign --signer-file juliet-secret.pgp --message document.txt
Create a detached signature.
sq sign --signer-file juliet-secret.pgp \ --signature-file=document.txt.sig document.txt
Version
1.4.1
Releases
4 releases since Debian 11 (Bullseye); the text changed 3 times.
--append since Debian 12 (Bookworm);
--binary since Debian 12 (Bookworm);
--cleartext since Debian 13 (Trixie);
--message since Debian 13 (Trixie);
--mode since Debian 13 (Trixie);
--signature-file since Debian 13 (Trixie);
--signer since Debian 13 (Trixie);
--signer-email since Debian 13 (Trixie);
--signer-file since Debian 13 (Trixie);
--signer-self since Debian 13 (Trixie);
--signer-userid since Debian 13 (Trixie).
--cleartext-signature until Debian 12 (Bookworm);
--detached until Debian 12 (Bookworm);
--help until Debian 12 (Bookworm);
--notarize until Debian 12 (Bookworm);
--notation until Debian 11 (Bullseye);
--private-key-store until Debian 12 (Bookworm);
--signer-key until Debian 12 (Bookworm);
--time until Debian 12 (Bookworm);
-B until Debian 12 (Bookworm);
-a until Debian 12 (Bookworm);
-h until Debian 12 (Bookworm);
-n until Debian 12 (Bookworm);
-o until Debian 12 (Bookworm);
-t until Debian 12 (Bookworm).