---
name: "msva-query-agent"
section: "1"
platform: "linux"
package: "msva-perl"
version: "0.9.2-1.1"
release: "Debian 13 (Trixie)"
platforms: ["linux"]
url: "https://new.carta.tech/msva-query-agent"
---

# msva-query-agent(1)

query a Monkeysphere Validation Agent

## NAME

msva-query-agent - query a Monkeysphere Validation Agent

## SYNOPSIS

msva-query-agent CONTEXT PEER PKC\_TYPE \[PEER\_TYPE\] \< /path/to/public\_key\_carrier

msva-query-agent CONTEXT PEER PKC\_TYPE PEER\_TYPE PKC\_DATA

msva-query-agent --version

## ABSTRACT

msva-query-agent validates certificates for a given use by querying a running Monkeysphere Validation Agent.

## USAGE

msva-query-agent reads a certificate from standard input, and posts it to the running Monkeysphere Validation Agent.  The return code indicates the validity (as determined by the agent) of the certificate for the specified purpose.  The agent's return message (if any) is emitted on stdout.

The various arguments are:

- CONTEXT

  Context in which the certificate is being validated (e.g. 'https', 'ssh', 'ike')

- PEER

  The name of the intended peer.  When validating a certificate for a service, supply the host's full DNS name (e.g.  'foo.example.net')

- PKC\_TYPE

  The format of public key carrier data provided on standard input (e.g. 'x509der', 'x509pem', 'opensshpubkey', 'rfc4716', 'openpgp4fpr')

- PEER\_TYPE

  The type of peer we are inquiring about (e.g. 'client', 'server', 'peer').  This argument is optional and defaults will be used (based on CONTEXT) if it is not supplied.

- PKC\_DATA

  This is the actual public key carrier data itself.  If less than five arguments are given, then the PKC\_DATA is expected on stdin.  If five arguments are given, the fifth argument is interpreted as the PKC\_DATA.  This is likely only useful for supplying an OpenPGP fingerprint with the 'openpgp4fpr' type.

## RETURN CODE

If the certificate is valid for the requested peer in the given context, the return code is 0.  Otherwise, the return code is 1.

## ENVIRONMENT VARIABLES

msva-query-agent's behavior is controlled by environment variables:

- MONKEYSPHERE\_VALIDATION\_AGENT\_SOCKET

  Socket over which to query the validation agent.  If unset, the default value is 'http://127.0.0.1:8901'.

- MSVA\_LOG\_LEVEL

  Log messages about its operation to stderr.  MSVA\_LOG\_LEVEL controls its verbosity, and should be one of (in increasing verbosity): silent, quiet, fatal, error, info, verbose, debug, debug1, debug2, debug3. Default is 'error'.

## COMMUNICATION PROTOCOL DETAILS

Communications with the Monkeysphere Validation Agent are in the form of JSON requests over plain HTTP.  Responses from the agent are also JSON objects.  For details on the structure of the requests and responses, please see http://web.monkeysphere.info/validation-agent/protocol

## SEE ALSO

[**msva-perl**(1)](/msva-perl/1.md), [**monkeysphere**(1)](/monkeysphere/1.md), [**monkeysphere**(7)](/monkeysphere/7.md)

## BUGS AND FEEDBACK

Bugs or feature requests for msva-perl and associated tools should be filed with the Monkeysphere project's bug tracker at https://labs.riseup.net/code/projects/monkeysphere/issues/

## AUTHORS AND CONTRIBUTORS

Jameson Graef Rollins \<jrollins@finestructure.net\<gt\> Daniel Kahn Gillmor \<dkg@fifthhorseman.net\<gt\>

The Monkeysphere Team http://web.monkeysphere.info/

## COPYRIGHT AND LICENSE

Copyright X 2010, Jameson Graef Rollins and others from the Monkeysphere team.  msva-query-agent is free software, distributed under the GNU Public License, version 3 or later.