SQ(1)

NAME
sq wkd generate - Generates a Web Key Directory for the given domain and keys.

SYNOPSIS
sq [GLOBAL OPTIONS] wkd generate [OPTIONS] WEB-ROOT FQDN CERT-RING

DESCRIPTION
Generates a Web Key Directory for the given domain and keys.

If the WKD exists, the new keys will be inserted and it is updated and existing ones will be updated.

A WKD is per domain, and can be queried using the advanced or the direct method. The advanced method uses a URL with a subdomain 'openpgpkey'. As per the specification, the advanced method is to be preferred. The direct method may only be used if the subdomain doesn't exist. The advanced method allows web key directories for several domains on one web server.

The contents of the generated WKD must be copied to a web server so that they are accessible under https://openpgpkey.example.com/.well-known/openpgp/... for the advanced version, and https://example.com/.well-known/openpgp/... for the direct version. sq does not copy files to the web server.

OPTIONS

  Global options

-f, --force
    Overwrites existing files

--help
    Print help information

--known-notation=NOTATION
    Adds NOTATION to the list of known notations

--output-format=FORMAT
    Produces output in FORMAT, if possible

--output-version=VERSION
    Produces output variant VERSION.

--version
    Print version information

  Subcommand options

-d, --direct-method
    Uses the direct method [default: advanced method]

--help
    Print help information

-s, --skip
    Skips certificates that do not have User IDs for given domain.

--version
    Print version information

EXAMPLES

Generate a WKD in /tmp/wkdroot from certs.pgp for example.com.

    sq wkd generate /tmp/wkdroot example.com certs.ppg

SEE ALSO
sq(1).

For the full documentation see <https://docs.sequoia-pgp.org/sq/>.

VERSION
0.28.0 (sequoia-openpgp 1.13.0, using Nettle)