NAME

       authenticate - Authenticate a binding

SYNOPSIS

       authenticate [--email] [-h|--help] <FINGERPRINT|KEYID> <USERID>

DESCRIPTION

       Authenticate a binding.

       Authenticate  a  binding  (a  certificate  and User ID) by looking for a path from the trust roots to the
       specified  binding  in  the  web  of  trust.   Because  certifications  may  express  uncertainty  (i.e.,
       certifications may be marked as conveying only partial or marginal trust), multiple paths may be needed.

       If  a  binding  could  be  authenticated to the specified level (by default: fully authenticated, i.e., a
       trust amount of 120), then the exit status is 0.  Otherwise the exit status is 1.

       If any valid paths to the binding are found, they are printed on stdout whether they  are  sufficient  to
       authenticate the binding or not.

OPTIONS

       --email
              Changes the USERID parameter to match User IDs with the specified email address.

              Interprets  the  USERID  parameter as an email address, which is then used to select User IDs with
              that email address.

              Unlike when comparing User IDs, email addresses are first normalized by the domain to ASCII  using
              IDNA2008  Punycode  conversion, and then converting the resulting email address to lowercase using
              the empty locale.

              If multiple User IDs match, they are each considered in turn, and this function returns success if
              at least one of those User IDs can be authenticated.  Note: The paths to the  different  User  IDs
              are not combined.

       -h, --help
              Print help (see a summary with '-h')

       <FINGERPRINT|KEYID>
              The fingerprint or Key ID of the certificate to authenticate

       <USERID>
              The User ID to authenticate.

              This is case sensitive, and must be the whole User ID, not just a substring or an email address.

EXTRA

       EXAMPLES:

         # Authenticate a binding.
         $ sq-wot --keyring keyring.pgp \
             --partial \
             --trust-root 8F17777118A33DDA9BA48E62AACB3243630052D9 \
           authenticate \
             C7966E3E7CE67DBBECE5FC154E2AD944CFC78C86 \
             'Alice <alice@example.org>'

         # The same as above, but this time generate output in DOT format
         # and convert it to an SVG using Graphviz's DOT compiler.
         $ sq-wot --format dot \
             --keyring keyring.pgp \
             --partial \
             --trust-root 8F17777118A33DDA9BA48E62AACB3243630052D9 \
           authenticate \
             C7966E3E7CE67DBBECE5FC154E2AD944CFC78C86 \
             'Alice <alice@example.org>' \
           | dot -Tsvg -o alice.pgp

         # Try and authenticate each binding where the User ID has the
         # specified email address.
         $ sq-wot --keyring keyring.pgp \
             --trust-root 8F17777118A33DDA9BA48E62AACB3243630052D9 \
           authenticate \
             C7966E3E7CE67DBBECE5FC154E2AD944CFC78C86 \
             --email 'alice@example.org'

         # The same as above, but this time generate output in DOT format
         # and convert it to an SVG using Graphviz's DOT compiler.
         $ sq-wot --format dot \
             --keyring keyring.pgp \
             --trust-root 8F17777118A33DDA9BA48E62AACB3243630052D9 \
           authenticate \
             C7966E3E7CE67DBBECE5FC154E2AD944CFC78C86 \
             --email 'alice@example.org' \
           | dot -Tsvg -o alice.svg

                                                  authenticate                                   authenticate(1)