SQ(1)

NAME
sq wot authenticate - Authenticate a binding

SYNOPSIS
sq [GLOBAL OPTIONS] wot authenticate [OPTIONS] FINGERPRINT|KEYID USERID

DESCRIPTION
Authenticate a binding.

Authenticate a binding (a certificate and User ID) by looking for a path from the trust roots to the specified binding in the web of trust. Because certifications may express uncertainty (i.e., certifications may be marked as conveying only partial or marginal trust), multiple paths may be needed.

If a binding could be authenticated to the specified level (by default: fully authenticated, i.e., a trust amount of 120), then the exit status is 0. Otherwise the exit status is 1.

If any valid paths to the binding are found, they are printed on stdout whether they are sufficient to authenticate the binding or not.

OPTIONS

  Global options

--cert-store=PATH
    Specifies the location of the certificate store

-f, --force=FORCE
    Overwrites existing files

--keyring=PATH
    Specifies the location of a keyring to use

--known-notation=NOTATION
    Adds NOTATION to the list of known notations

--no-cert-store=NO_CERT_STORE
    Disables the use of a certificate store

--output-format=FORMAT
    Produces output in FORMAT, if possible

--output-version=VERSION
    Produces output variant VERSION.

--pep-cert-store=PATH
    Specifies the location of a pEp certificate store

--time=TIME
    Sets the reference time as ISO 8601 formatted timestamp

--trust-root=FINGERPRINT|KEYID
    Considers the specified certificate to be a trust root

  Subcommand options

--email=EMAIL
    Changes the USERID parameter to match User IDs with the specified email address

EXAMPLES

  # Authenticate a binding.

  $ sq --keyring keyring.pgp \

      wot \

      --partial \

      --trust-root 8F17777118A33DDA9BA48E62AACB3243630052D9 \

    authenticate \

      C7966E3E7CE67DBBECE5FC154E2AD944CFC78C86 \

      'Alice <alice@example.org>'

  # The same as above, but this time generate output in DOT format

  # and convert it to an SVG using Graphviz's DOT compiler.

  $ sq --format dot \

      --keyring keyring.pgp \

      --trust-root 8F17777118A33DDA9BA48E62AACB3243630052D9 \

    wot authenticate \

      --partial \

      C7966E3E7CE67DBBECE5FC154E2AD944CFC78C86 \

      'Alice <alice@example.org>' \

    | dot -Tsvg -o alice.pgp

  # Try and authenticate each binding where the User ID has the

  # specified email address.

  $ sq --keyring keyring.pgp \

      --trust-root 8F17777118A33DDA9BA48E62AACB3243630052D9 \

    wot authenticate \

      C7966E3E7CE67DBBECE5FC154E2AD944CFC78C86 \

      --email 'alice@example.org'

  # The same as above, but this time generate output in DOT format

  # and convert it to an SVG using Graphviz's DOT compiler.

  $ sq --format dot \

      --keyring keyring.pgp \

      --trust-root 8F17777118A33DDA9BA48E62AACB3243630052D9 \

    wot authenticate \

      C7966E3E7CE67DBBECE5FC154E2AD944CFC78C86 \

      --email 'alice@example.org' \

    | dot -Tsvg -o alice.svg

SEE ALSO
sq(1).

For the full documentation see <https://docs.sequoia-pgp.org/sq/>.

VERSION
0.31.0 (sequoia-openpgp 1.16.0, using Nettle 3.9 (Cv448: true))