Scroll to navigation

SQ(1) User Commands SQ(1)

NAME

sq network wkd publish - Publish certificates in a Web Key Directory

SYNOPSIS

sq network wkd publish [OPTIONS] DEST

DESCRIPTION

Publish certificates in a Web Key Directory.

Publishes certificates or certificate updates in a Web Key Directory (WKD). You can create or update a WKD hierarchy on the local system by specifying a path as destination.

Typically, a WKD is stored on a web server. If `--rsync` is given, this command manages remote WKD directory hierarchies by using rsync(1).

To insert a new certificate into the WKD, use `--cert`.

Any updates for certificates already existing in the WKD are automatically published.

Note: To update a WKD hierarchy, it is first copied to a temporary location on the local machine, new certificates or certificate updates are inserted into the local copy, and the hierarchy is copied back to its original location. As this is not an atomic operation, care must be taken to avoid concurrent updates.

OPTIONS

Subcommand options

Publish authenticated certs with a user ID matching domain
Use all certificates that have a user ID matching the domain given to the `--domain` parameter that can be fully authenticated.
Use certificates with the specified fingerprint or key ID
Use certificates where a user ID includes the specified email address
Read certificates from PATH
Use certificates with the specified user ID
Create the WKD hierarchy if it does not exist yet
Generate a WKD for a fully qualified domain name for email
Select kind of WKD hierarchy to be created
The advanced method, which is the default and should be preferred, is hosted on a separate domain (e.g. openpgpkey.example.org).
The direct method is hosted on the same domain (e.g. example.org).
[possible values: advanced, direct]
Use rsync(1) to access DEST
Path to the local rsync command to use, implies --rsync
Location of the WKD on the local or remote machine
If --rsync is given, this is passed as-is to rsync(1).

Global options

See sq(1) for a description of the global options.

EXAMPLES

Create a new WKD hierarchy in the local directory `public_html`, and insert Alice's cert.

sq network wkd publish --create \
--cert=EB28F26E2739A4870ECC47726F0073F60FD0CBF0 \
--domain=example.org public_html

Add Bob's cert to the existing WKD hierarchy in the local directory `public_html`.

sq network wkd publish \
--cert=511257EBBF077B7AEDAE5D093F68CB84CE537C9A \
--domain=example.org public_html

Add all certs with an authenticated user ID in example.org to the existing WKD hierarchy.

sq network wkd publish --domain=example.org --all public_html

Refresh all certs in the existing WKD hierarchy in the local directory `public_html` from the cert store.

sq network wkd publish --domain=example.org public_html

SEE ALSO

sq(1), sq-network(1), sq-network-wkd(1).

For the full documentation see <https://book.sequoia-pgp.org>.

VERSION

1.1.0 (sequoia-openpgp 1.22.0)

1.1.0 Sequoia PGP