cli.sgit.ai / Command reference / sgit pki

sgit pki

PKI key management and encryption.

Generated from sgit help all --format json, sgit-ai v0.23.0. 10 subcommands below. To change this page, change the command's register() in the CLI and regenerate.

sgit pki

Subcommands

sgit pki contacts: List imported contacts
sgit pki decrypt: Decrypt a file with local key
sgit pki delete: Delete key pair
sgit pki encrypt: Encrypt a file for a recipient
sgit pki export: Export public key bundle (JSON)
sgit pki import: Import contact public key
sgit pki keygen: Generate encryption + signing key pair
sgit pki list: List local key pairs
sgit pki sign: Sign a file (detached signature)
sgit pki verify: Verify a detached signature

sgit pki contacts

List imported contacts

sgit pki contacts

sgit pki decrypt

Decrypt a file with local key

sgit pki decrypt [options] <file>

Argument		What it is
`file`	required	Encrypted file (.enc)

Option	What it does
`--fingerprint`	Your encryption key fingerprint
`--output`, `-o`	Output file, or - for stdout (default: FILE without .enc)

sgit pki delete

Delete key pair

sgit pki delete <fingerprint>

Argument		What it is
`fingerprint`	required	Encryption key fingerprint

sgit pki encrypt

Encrypt a file for a recipient

sgit pki encrypt [options] <file>

Argument		What it is
`file`	required	File to encrypt

Option	What it does
`--fingerprint`	Your key fingerprint (for signing)
`--output`, `-o`	Output file (default: FILE.enc)
`--recipient`	Recipient fingerprint (a contact or one of your key pairs)

sgit pki export

Export public key bundle (JSON)

sgit pki export <fingerprint>

Argument		What it is
`fingerprint`	required	Encryption key fingerprint

sgit pki import

Import contact public key

sgit pki import <file>

Argument		What it is
`file`	required	Path to public key bundle JSON (or - for stdin)

sgit pki keygen

Generate encryption + signing key pair

sgit pki keygen [options]

Option	What it does
`--label`	Label for the key pair

sgit pki list

List local key pairs

sgit pki list

sgit pki sign

Sign a file (detached signature)

sgit pki sign [options] <file>

Argument		What it is
`file`	required	File to sign

Option	What it does
`--fingerprint`	Signing key fingerprint

sgit pki verify

Verify a detached signature

sgit pki verify [options] <file> <signature>

Argument		What it is
`file`	required	File to verify
`signature`	required	Signature file (.sig)

Option	What it does
`--json`	Print {valid, signing_fingerprint, signer_label, signer_source} as JSON

← sgit migrate sgit publish →

This page as markdown · its source, admin/content/reference/sgit-cli-reference.json