.TH SQ 1 1.4.0 "Sequoia PGP" "User Commands"
.SH NAME
sq\-pki\-link\-retract \- Retract links
.SH SYNOPSIS
.br
\fBsq pki link retract\fR [\fIOPTIONS\fR]  
.SH DESCRIPTION
Retract links.
.PP
This command retracts links that were previously created using `sq pki link add` or `sq pki link authorize`.  See that subcommand's documentation for more details. Note: this is called `retract` and not `remove`, because the certifications are not removed.  Instead a new certification is added, which says that the binding has not been authenticated.
.PP
`sq pki link retract` respects the reference time set by the top\-level `\-\-time` argument.  This causes a link to be retracted as of a particular time instead of the current time.
.PP


.SH OPTIONS
.SS "Subcommand options"
.TP
\fB\-\-all\fR
Use all self\-signed user IDs
.TP
\fB\-\-cert\fR=\fIFINGERPRINT|KEYID\fR
Use certificates with the specified fingerprint or key ID
.TP
\fB\-\-cert\-special\fR=\fISPECIAL\fR
Use certificates identified by the special name
.IP
[possible values: \fBpublic\-directories\fR, \fBkeys.openpgp.org\fR, \fBkeys.mailvelope.com\fR, \fBproton.me\fR, \fBwkd\fR, \fBdane\fR, \fBautocrypt\fR, \fBweb\fR]
.TP
\fB\-\-email\fR=\fIEMAIL\fR
Use a user ID with the specified email address
.IP
The user ID consists of just the email address.  The email address does not have to appear in a self\-signed user ID.
.TP
\fB\-\-recreate\fR
Recreate signature even if the parameters did not change
.IP
If the link parameters did not change, and thus creating a signature should not be necessary, we omit the operation.  This flag can be given to force the signature to be re\-created anyway.
.TP
\fB\-\-signature\-notation\fR \fINAME\fR \fIVALUE\fR
Add a notation to the signature
.IP
A user\-defined notation's name must be of the form `name@a.domain.you.control.org`. If the notation's name starts with a `!`, then the notation is marked as being critical.  If a consumer of a signature doesn't understand a critical notation, then it will ignore the signature.  The notation is marked as being human readable.
.TP
\fB\-\-userid\fR=\fIUSERID\fR
Use the specified user ID
.IP
The specified user ID does not need to be self signed.
.IP
Because using a user ID that is not self\-signed is often a mistake, you need to use this option to explicitly opt in.
.TP
\fB\-\-userid\-by\-email\fR=\fIEMAIL\fR
Use the self\-signed user ID with the specified email address
.SS "Global options"
See \fBsq\fR(1) for a description of the global options.
.SH EXAMPLES
.PP

.PP
Link the certificate EB28F26E2739A4870ECC47726F0073F60FD0CBF0 with the
email address alice@example.org.
.PP
.nf
.RS
sq pki link add \\
.RE
.RS
.RS
\-\-cert=EB28F26E2739A4870ECC47726F0073F60FD0CBF0 \\
.RE
.RE
.RS
.RS
\-\-add\-email=alice@example.org
.RE
.RE
.PP
.fi

.PP
Retract the acceptance of certificate
EB28F26E2739A4870ECC47726F0073F60FD0CBF0 and the email address
alice@example.org.
.PP
.nf
.RS
sq pki link retract \\
.RE
.RS
.RS
\-\-cert=EB28F26E2739A4870ECC47726F0073F60FD0CBF0 \\
.RE
.RE
.RS
.RS
\-\-email=alice@example.org
.RE
.RE
.PP
.fi

.PP
Retract the acceptance of certificate
EB28F26E2739A4870ECC47726F0073F60FD0CBF0 and any associated user IDs.
This effectively invalidates all links.
.PP
.nf
.RS
sq pki link retract \\
.RE
.RS
.RS
\-\-cert=EB28F26E2739A4870ECC47726F0073F60FD0CBF0 \-\-all
.RE
.RE
.fi
.SH "SEE ALSO"
.nh
\fBsq\fR(1), \fBsq\-pki\fR(1), \fBsq\-pki\-link\fR(1).
.hy
.PP
For the full documentation see <https://book.sequoia\-pgp.org/>.
.SH VERSION
1.4.0