---
name: "sq-network-keyserver"
section: "1"
platform: "linux"
package: "sequoia-sq"
version: "1.4.1-1"
release: "Arch Linux 2026-11-01"
platforms: ["linux"]
url: "https://new.carta.tech/sq-network-keyserver"
---

# sq-network-keyserver(1)

Retrieve and publishes certificates via key servers

## NAME

sq-network-keyserver - Retrieve and publishes certificates via key servers

## SYNOPSIS

**sq network keyserver search** \[*OPTIONS*\] *QUERY*\
 **sq network keyserver publish** \[*OPTIONS*\]

## DESCRIPTION

Retrieve and publishes certificates via key servers.

The OpenPGP HTTP Keyserver Protocol (HKP) is a method for publishing and retrieving certificates from key servers.

## SUBCOMMANDS

### sq network keyserver search

Retrieve certificates from key servers.

By default, any returned certificates are stored in the local certificate store.  This can be overridden by using \`--output\` option.

When a certificate is retrieved from a verifying key server (currently, this is limited to a list of known servers: \`hkps://keys.openpgp.org\`, \`hkps://keys.mailvelope.com\`, and \`hkps://mail-api.proton.me\`), and imported into the local certificate store, the User IDs are also certificated with a local server-specific key.  That proxy certificate is in turn certified as a minimally trusted CA (trust amount: 1 of 120) by the local trust root.  How much a proxy key server CA is trusted can be tuned using \`sq pki link add\` or \`sq pki link retract\` in the usual way.

### sq network keyserver publish

Publish certificates on key servers.

Sends certificates to the configured key servers for publication.  By default, the certificates are sent to \`hkps://keys.openpgp.org\`, \`hkps://mail-api.proton.me\`, \`hkps://keys.mailvelope.com\`, \`hkps://keyserver.ubuntu.com\`, and \`hkps://sks.pod01.fleetstreetops.com\`.  This can be tweaked using \`--servers\`.

## EXAMPLES

### sq network keyserver search

Retrieve Alice's certificate from the default keyservers.

```
sq network keyserver search alice@example.org
```

Retrieve Alice's certificate addressed by fingerprint from the default keyservers.

```
sq network keyserver search \
EB28F26E2739A4870ECC47726F0073F60FD0CBF0
```

Retrieve Alice's certificate from a non-default keyserver.

```
sq network keyserver search --server=hkps://keys.example.org \
alice@example.org
```

Retrieve updates for all known certificates from the default keyservers.

```
sq network keyserver search --all
```

### sq network keyserver publish

Publish Alice's certificate on the default keyservers.

```
sq network keyserver publish --cert-email=alice@example.org
```

## SEE ALSO

[**sq**(1)](/sq/1.md), [**sq-network**(1)](/sq-network/1.md), [**sq-network-keyserver-search**(1)](/sq-network-keyserver-search/1.md), [**sq-network-keyserver-publish**(1)](/sq-network-keyserver-publish/1.md).

For the full documentation see \<https://book.sequoia-pgp.org/\>.

## VERSION

1\.4.1