SQ(1) User Commands SQ(1)

sq network dane generate - Generate DANE records for the given domain and certs

sq network dane generate [OPTIONS]

Generate DANE records for the given domain and certs.

The certificates are minimized, and one record per email address is emitted. If multiple user IDs map to one email address, then all matching user IDs are included in the emitted certificates.

By default, OPENPGPKEY resource records are emitted. If your DNS server doesn't understand those, use `--type generic` to emit generic records instead.

Use all authenticated certificates with a user ID in the given domain
Use all certificates that have a user ID matching the domain given to the `--domain` parameter that can be fully authenticated.
Use certificates with the specified fingerprint or key ID
Use certificates where a user ID includes the specified email address
Read certificates from PATH
Use certificates with the specified user ID
Generate DANE records for this domain name
Try to shrink the certificates to this size
[default: 12288]
Set the TTL (maximum cache duration) of the resource records
[default: 10800]
Change the emitted resource record type
[default: openpgp]
[possible values: openpgp, generic]

See sq(1) for a description of the global options.

Generate DANE records from juliet.pgp for example.org.

sq network dane generate --domain=example.org \
--cert-file=juliet.pgp




Generate DANE records for all certs with an authenticated user ID
    in example.org.






sq network dane generate --domain=example.org --all












sq(1), sq-network(1), sq-network-dane(1).


For the full documentation see
    <https://book.sequoia-pgp.org>.








0.40.0 (sequoia-openpgp 1.21.2)







  

    0.40.0
    Sequoia PGP