sign(1)

NAME
sign - Signs messages or data files

SYNOPSIS
sign [-o|--output] [-B|--binary] [--private-key-store] [--detached] [--cleartext-signature] [-a|--append] [-n|--notarize] [--merge] [--signer-file] [--notation] [-h|--help] [FILE]

DESCRIPTION
Signs messages or data files

Creates signed messages or detached signatures. Detached signatures are often used to sign software packages.

The converse operation is "sq verify".

"sq sign" respects the reference time set by the top-level "--time" argument. When set, it uses the specified time instead of the current time, when determining what keys are valid, and it sets the signature's creation time to the reference time instead of the current time.

OPTIONS

-o, --output=FILE
    Writes to FILE or stdout if omitted

-B, --binary=BINARY
    Emits binary data

--private-key-store=KEY_STORE
    Provides parameters for private key store

--detached=DETACHED
    Creates a detached signature

--cleartext-signature=CLEARSIGN
    Creates a cleartext signature

-a, --append=APPEND
    Appends a signature to existing signature

-n, --notarize=NOTARIZE
    Signs a message and all existing signatures

--merge=SIGNED-MESSAGE
    Merges signatures from the input and SIGNED-MESSAGE

--signer-file=KEY_FILE
    Signs the message using the key in KEY_FILE

--notation=NAME VALUE
    Adds a notation to the certification. A user-defined notation's name must be of the form "name@a.domain.you.control.org". If the notation's name starts with a !, then the notation is marked as being critical. If a consumer of a signature doesn't understand a critical notation, then it will ignore the signature. The notation is marked as being human readable.

-h, --help
    Print help information (use `-h` for a summary)

[FILE]
    Reads from FILE or stdin if omitted

EXTRA
EXAMPLES: # Create a signed message $ sq sign --signer-file juliet.pgp message.txt # Create a detached signature $ sq sign --detached --signer-file juliet.pgp message.txt # Create a signature with the specified creation time $ sq sign --time 20020304 --detached --signer-file juliet.pgp message.txt