.TH SQ 1 1.4.0 "Sequoia PGP" "User Commands"
.SH NAME
sq\-network\-keyserver\-search \- Retrieve certificates from key servers
.SH SYNOPSIS
.br
\fBsq network keyserver search\fR [\fIOPTIONS\fR] \fIQUERY\fR
.SH DESCRIPTION
Retrieve certificates from key servers.
.PP
By default, any returned certificates are stored in the local certificate store.  This can be overridden by using `\-\-output` option.
.PP
When a certificate is retrieved from a verifying key server (currently, this is limited to a list of known servers: `hkps://keys.openpgp.org`, `hkps://keys.mailvelope.com`, and `hkps://mail\-api.proton.me`), and imported into the local certificate store, the User IDs are also certificated with a local server\-specific key.  That proxy certificate is in turn certified as a minimally trusted CA (trust amount: 1 of 120) by the local trust root.  How much a proxy key server CA is trusted can be tuned using `sq pki link add` or `sq pki link retract` in the usual way.
.PP


.SH OPTIONS
.SS "Subcommand options"
.TP
\fB\-\-all\fR
Fetch updates for all known certificates
.TP
\fB\-\-output\fR=\fIFILE\fR
Write to FILE (or stdout when omitted) instead of importing into the certificate store
.TP
\fB\-\-server\fR=\fIURI\fR
Set a key server to use (can be given multiple times)
.IP
The default can be changed in the configuration file using the setting `network.keyserver.servers`.
.IP
[default: \fBhkps://keys.openpgp.org\fR, \fBhkps://mail\-api.proton.me\fR, \fBhkps://keys.mailvelope.com\fR, \fBhkps://keyserver.ubuntu.com\fR, \fBhkps://sks.pod01.fleetstreetops.com\fR]
.TP
 \fIQUERY\fR
Retrieve certificate(s) using QUERY
.IP
This may be a fingerprint, a KeyID, or an email address.
.SS "Global options"
See \fBsq\fR(1) for a description of the global options.
.SH EXAMPLES
.PP

.PP
Retrieve Alice's certificate from the default keyservers.
.PP
.nf
.RS
sq network keyserver search alice@example.org
.RE
.PP
.fi

.PP
Retrieve Alice's certificate addressed by fingerprint from the default
keyservers.
.PP
.nf
.RS
sq network keyserver search \\
.RE
.RS
.RS
EB28F26E2739A4870ECC47726F0073F60FD0CBF0
.RE
.RE
.PP
.fi

.PP
Retrieve Alice's certificate from a non\-default keyserver.
.PP
.nf
.RS
sq network keyserver search \-\-server=hkps://keys.example.org \\
.RE
.RS
.RS
alice@example.org
.RE
.RE
.PP
.fi

.PP
Retrieve updates for all known certificates from the default keyservers.
.PP
.nf
.RS
sq network keyserver search \-\-all
.RE
.fi
.SH "SEE ALSO"
.nh
\fBsq\fR(1), \fBsq\-network\fR(1), \fBsq\-network\-keyserver\fR(1).
.hy
.PP
For the full documentation see <https://book.sequoia\-pgp.org/>.
.SH VERSION
1.4.0