| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: sequoia-sq-bash-completion | Distribution: openSUSE Tumbleweed |
| Version: 1.5.0 | Vendor: openSUSE |
| Release: 1.1 | Build date: Mon Oct 12 13:49:02 2026 |
| Group: Productivity/Security | Build host: reproducible |
| Size: 315370 | Source RPM: sequoia-sq-1.5.0-1.1.src.rpm |
| Packager: https://bugs.opensuse.org | |
| Url: https://sequoia-pgp.org/ | |
| Summary: Bash completion for sequoia-sq | |
Bash command line completion support for sequoia-sq
LGPL-2.0-or-later
* Mon Oct 12 2026 Felix Niederwanger <felix.niederwanger@suse.de>
- Use crypto-openssl also for tests
* Thu Oct 08 2026 Felix Niederwanger <felix.niederwanger@suse.de>
- Re-add 0001-Use-openssl.patch for the new workspaces defined in 1.5.0
* Wed Oct 07 2026 Felix Niederwanger <felix.niederwanger@suse.de>
- Remove dependency pinning for v1.4
- Fix build to account for Rust workspaces
- Switch back to the default nettle backend
* Remove 0001-Use-openssl.patch
- Update to version 1.5.0:
* tool: Release v1.5.0.
* tool: Fix link to README.
* tool: Set a version for the sqz dependency.
* Enable optimizations when building rust-crypto crates.
* Update NEWS.
* lib: Release v0.1.0.
* Update Cargo.lock.
* meta: Update link to documentation.
* lib: Update README.
* lib: Rename the high-level library to sqz.
* lib: Fix documentation.
* lib: Mention network_search in the lookup functions documentation.
* lib: Mention lookup and lookup_by in the certify documentation.
* lib: Mention lookup_by sign documentation.
* lib: Document that calls don't need to specify secret key material.
* lib: Fix docs.rs URL
* meta: Add rustfmt.toml that disables formatting
* lib: fix type infer error
* lib: Pass Paths through as is.
* lib: Preprocess the network when listing all bindings.
* lib: Upgrade sequoia-wot.
* lib: After running cert list, save the signature verification cache.
* lib: Parallelize cert list.
* lib: Pass the policy when getting the trust root or a shadow CA.
* implement dumping of pqc artifacts
* lib: Use an iterator instead of a slice.
* lib: Avoid monomorphization in signer.
* lib: Fix documentation.
* tool: Fix documentation.
* lib: Drop unnecessary imports in example.
* lib: Add required clap features.
* lib: Gate network support behind a feature.
* Don't conflate inline and cleartext signatures.
* lib: Document the signer module.
* lib: Add unit tests to the signer module.
* lib: Fix get_primary_keys's return type.
* lib: Convert get_signing_key, etc. to use the builder pattern.
* lib: Move decrypt_key to its own module.
* lib: Rename keys module to signer.
* lib: Refactor get_keys and associated functions.
* lib: Improve prompt's documentation.
* lib: Add a default prompt to Sequoia, don't require a prompt.
* lib: Loosen Sized constraint.
* lib: Make Prompt and PromptFactory Send and Sync.
* lib: Change SequoiaBuilder::builder to consume self.
* lib: Use explicit lifetimes with Context and Check.
* Use more precise lifetimes when referencing Sequoia and Sq.
* Replace generic lifetime names with more precise identifiers.
* tool: Fix password prompt.
* lib: Add PromptFactory.
* tool: Drop Sq::local_trust_root.
* lib: Change Ca to wrap a Cert instead of an Arc<LazyCert>.
* lib: Add functionality for looking up certificates by email address.
* lib: Add cert::CertProblem::ParseError.
* tool: Don't wrap Sequoia::lookup.
* lib: Improve lookup's documentation.
* lib: Rename lookup to lookup_all.
* lib: Don't write lints to stderr.
* lib: Change lookup to use its own error type.
* lib: Fix how Binding::cert looks up a certificate.
* lib: Add an option to lookup certificates by subkey.
* lib: Rename lookup's keyflags parameter to key_capabilities.
* lib: Drop lookup's unused or_by_primary parameter.
* lib: Fix key flags matching bug in Sequoia::lookup.
* tool: Improve displaying possibly revoked certificates.
* lib: Change lookup to take a single key handle.
* lib: Improve key generate's documentation.
* lib: Add unit tests for key generate.
* lib: Avoid monomorphization in key generate.
* lib: Rename Artifact to Outcome.
* lib: Use impl IntoIterator in setters.
* lib: Drop duplicated code.
* lib: Implement Clone for a few data structures.
* lib: Mark UserIDLint as non-exhaustive.
* lib: Implement Clone for UserIDLint.
* lib: Implement IntoIterator for network::search::Query.
* lib: Change network search to return an Outcome on success.
* lib: Change function to take an IntoIterator instead of a Vec.
* lib: Avoid monomorphization in the network search functionality.
* lib: Implement Clone for a few data structures.
* lib: Make Response and SourceInfo clonable.
* lib: Change cert list to always emit a Report.
* lib: Change cert list to return an Outcome on success.
* lib: Change cert list's getters to use iterators.
* lib: Implement Clone for additional structs and enums.
* lib: Change the decrypt functions to return an Outcome on success.
* lib: Avoid monomorphization in the decrypt functionality.
* lib: Change decrypt's getters to use iterators.
* lib: Implement Clone for additional structs and enums.
* lib: Change KeyStoreUnreachable to use a more precise error type.
* lib: Add some additional unit tests for the verify functionality.
* lib: Change the verify functions to return an Outcome on success.
* lib: Change verify to avoid monomorphization.
* lib: Improve key import's documentation.
* lib: Make a parse error an operational error.
* lib: Implement Clone for additional structs and enums.
* lib: Respect SEQUOIA_HOME by default.
* lib: Add import_cert to import a single certificate.
* lib: Improve cert list's documentation.
* lib: Make a parse error an operational error.
* lib: Fix import to emit errors.
* lib: Fix cert::import::Builder::import to return an Outcome.
* lib: Change cert import's getters and setters to use iterators.
* lib: Implement Clone for a few data structures.
* lib: Fix Sequoia::trust_roots's cache.
* lib: Improve certify's documentation.
* lib: Rework certify's error handling.
* lib: Add SystemError to pki::certify::{Error,Output}.
* lib: Adjust certify::Error::CertificationError.
* lib: Refactor how certify populates Outcome.
* lib: Use impl IntoIterator in setters.
* lib: Improve encrypt's documentation.
* lib: Add some unit tests for the encrypt functionality.
* lib: Align encrypt's signing error with sign's signing error.
* lib: Drop encrypt::output::EncryptionFailed.
* lib: Change encrypt to return an Outcome on success.
* lib: Rename Encrypted to Report.
* lib: Change the encrypt functionality to emit errors.
* lib: Change encrypt to use its own error type.
* lib: Implement Clone for prompt::Error.
* lib: Use impl IntoIterator in setters.
* lib: Avoid monomorphization in the encrypt functionality.
* lib: Improve sign's documentation.
* lib: Add some unit tests for the signing functionality.
* lib: Drop sign::output::SigningFailed.
* lib: Add missing `non_exhaustive`.
* lib: Change the sign functions to return an Outcome on success.
* lib: Fix comment.
* lib: Rename Signed to Report.
* lib: Change the sign functionality to emit errors.
* lib: Change sign to use its own error type.
* lib: Implement Clone for CertError, CertProblem and its variants.
* lib: Avoid monomorphization in the sign functionality.
* lib: Use impl IntoIterator in setters.
* lib: Mark struct as non-exhaustive.
* lib: Move types::Query et al. to cert::list.
* lib: Make cert_list's queries parameter optional.
* lib: Change list to take self, not &self.
* tool: When merging keyrings, preserve the order of the certificates.
* lib: Don't fail to generate a key if the shadow CAs are not usable.
* lib: Avoid an unnecessary box.
* lib: Drop the Sized bound in the impl of Prompt for &P.
* lib: Implement Clone for pki::certify's error types.
* lib: Change the cert import functions to return more information.
* lib: Consider a missing autocrypt header to be an import error.
* tool: Don't fail if the input to sq key import is empty.
* Update h2.
* lib: Improve cert::import::Output::ImportingFailed.
* lib: Tighten key import's error reporting.
* lib: Tighten cert import's error reporting.
* lib: Change the key import functions to return more information.
* lib: Change error type for a merged certificate.
* lib: Adjust the semantics of key import's return type.
* lib: Rework key::import::Builder::import_key.
* lib: Rework key import's error handling.
* lib: Move Error::StateDisabled to SystemError, drop Error.
* lib: Add a function to import Certs.
* lib: Add a separate error for emails with autocrypt headers.
* lib: Rename import_certs to import_keyring.
* lib: Improve cert import's documentation.
* lib: Change when cert import returns an error.
* lib: Rework cert import's error handling.
* lib: Move constructors for high-level methods to a single impl block.
* lib: Change verify to not require a stream.
* lib: Change sign to not require a stream.
* lib: Change pki certify to not require a stream.
* lib: Change network search to not require a stream.
* lib: Change encrypt to not require a stream.
* lib: Change decrypt to not require a stream.
* lib: Change cert import to not require a stream.
* lib: Make pki certify's output parameter optional.
* lib: Change pki::certify to return the certifications.
* lib: Change the encrypt method to take a Writer.
* lib: Change the sign methods to take a Writer.
* lib: Change the decrypt methods to take an OptionalWriter.
* lib: Change the verify methods to take an OptionalWriter.
* lib: Generalize and dry out the destination output handling.
* lib: Make network search's output parameter optional.
* Update spin.
* Update sequoia-openpgp.
* Update crossbeam-epoch.
* Forward allow-* crypto features.
* Relax rusqlite dependency.
* lib: Make key generate's output parameter more ergonomic.
* lib: Dry out the Stream trait declarations.
* tool: Add more cipher suites.
* tool: Use the right sig as the template for a new direct key sig
* tool: Add sq key generate --{encryption,signing}-algorithm.
* lib: Provide more control over the algorithms used in key generation.
* tool: Add type annotation.
* Update openssl.
* Update anyhow.
* lib: Add a method to Binding to return the certificate.
* lib: Add more conversion functions for FileStdinOrKeyHandle.
* lib: Make Sequoia::cert_store_ private.
* lib: Don't export Sequoia::hint or Sequoia::info.
* lib: Make the transitional module private.
* lib: Improve documentation for the lookup module.
* lib: Make the lookup module public.
* lib: Add some top-level documentation.
* lib: Add some unit tests for the verify functionality.
* lib: Change verify and decrypt to always emit a report.
* lib: Dry out code.
* lib: Tweak example.
* lib: Implement Clone for most of verify's structs and enums.
* lib: Improve documentation.
* lib: Finish convertng verify to emit structured output.
* lib: Change verify to also emit errors.
* lib: Add a forwarder to verify::Stream for &mut T.
* lib: Change verify to use its own error type.
* tool: Don't use transitional function from library.
* lib: Document network search.
* lib: Add some unit tests to network::search.
* lib: Always emit a report.
* lib: Propagate errors.
* lib: Check that the query is valid.
* lib: Separate network search's presentation from its implementation.
* lib: When configuring key servers, pass in the URI.
* lib: Add functions for getting more shadow CAs.
* lib: Implement Debug and Clone for Ca.
* lib: Inline serialize_keyring.
* lib: Inline import_or_emit.
* lib: Inline Response::progress_bar.
* lib: Inline Response::import_or_emit.
* lib: Inline Response::collect.
* lib: Change network::search to use its own Error type.
* lib: Make the Source data structure public.
* lib: Rename Method to Source.
* lib: Implement Debug for Query.
* lib: Add a source annotation to SystemError::CertStoreError.
* lib: Move the op macro to the errors module.
* lib: Change Sequoia::cert_store to return a SystemError.
* lib: Move search's parameters to the builder.
* lib: Change network search et al. to take `Query`s.
* lib: Make network::search::Query and a few methods public.
* lib: Dry out the network search code.
* lib: Change network search functions to be methods.
* lib: Make clap attribute feature gated
* lib: Export version number from library
* typo: cerItified
* Move the implementation of sq network search et al. to the library.
* Move http_client and related constants to the library.
* Move ResourceRecordType to the library.
* Move cert_exportable to the library.
* lib: Don't export the password_cache field.
* lib: Improve interface for setting session keys.
* lib: Improve interface for setting secret keys.
* lib: Improve interface for setting designated signers.
* lib: Improve and fix documentation for decrypt.
* lib: Add unit tests for decrypt.
* lib: Implement From<openpgp::crypto::SessionKey> for SessionKey.
* lib: Extract the correct error type from the decryption helper.
* lib: Rename MissingSessionKey to InvalidSessionKey.
* lib: Fix typo.
* lib: Change decrypt to use its own error type.
* lib: Change cert_list to also emit errors on the stream object.
* lib: Change cert_store_or_else to return SystemError
* lib: Implement Clone for SystemError.
* lib: Change cert::list::Builder::list to take &self.
* lib: Add SystemError::CertStoreDisabled
* lib: Convert Sequoia::lookup et al. to use the builder pattern.
* lib: Add documentation for cert_list.
* lib: Implement Debug for cert_list's output data structures.
* lib: Move output-related data structures to the output module.
* lib: Add some unit tests for Sequoia::cert_list.
* lib: Mark Query and QueryKind as non-exhaustive.
* lib: Add some additional constructors for Query.
* Split the Query type, and move the sq-specific part back to sq.
* lib: Change cert_list to take an interator instead of a Vec.
* lib: Change cert_list to always emit the report.
* lib: Change list_cert to not error out if nothing matches.
* lib: Change list to use its own error type.
* lib: Rename list::Builder::execute to list.
* lib: Change Sequoia::list to return a builder.
* lib: Remove the non-stream variant of cert_list.
* lib: Rename Sequoia::list to Sequoia::cert_list.
* lib: Re-initialize the WoT data structures when they are out of date.
* lib: Return an Arc<WotStore> instead of a &WotStore.
* lib: Add Sequoia::shadow_ca_generated_on.
* lib: Add utility function to get the generated on host shadow CA.
* lib: Add methods to look up shadow CAs.
* lib: Return more information from Sequoia::local_trust_root.
* lib: Move Sequoia::local_trust_root to its own module.
* lib: Move Sequoia::have_secret_key.
* lib: Drop Sequoia::lookup_by_userid. It's unused.
* lib: Fix spelling.
* lib: Set default revocable value to true.
* lib: Improve control char escaping
* lib: Change Builder setters to take `self` instead of `&mut self`.
* lib: Make SystemError global.
* lib: Add examples to the key generate documentation.
* lib: Change Sequoia::key_generate to emit structured output.
* lib: Use a wrapper type of the return type.
* tool: Include comments in sq cert export
* tool: canonicalize Ord and PartialOrd impls for Association
* tool: silence clippy error for potentially mutable Map key types
* tool: avoid allocating a temporary PathBuf just for a comparison
* clippy: silence two false positive unnecessary_to_owned warnings
* tool: avoid copying Url as String and convert to &str directly
* tool: avoid function calls in `Result::expect` arguments
* tool/log: allow for more efficient thread-local value initialization
* tool: drop to_string() calls for format! args that implement Display
* tool: fix formatting to avoid leaking comments into doc strings
* clippy: allow two types with interior mutability for BTreeSet keys
* lib: avoid allocating a temporary PathBuf just for a comparison
* lib: drop to_string() calls for format! args that implement Display
* lib: avoid potentially panicking integer cast
* lib/log: allow for more efficient thread-local value initialization
* clippy: add default lint configuration
* meta: enable MSRV-aware dependency resolver by default
* Update nettle-sys to fix building with LLVM / clang 22
* meta: Make fabio a committer.
* Convert key approvals update into builder pattern
* Move key-approvals-update to lib
* lib: Convert key approvals list into builder pattern
* Move key-approvals-list to lib
* lib: Change generate to use its own error type.
* lib: Return the linted user ID.
* CI: use new registry domain name
* lib: Change Sequoia::pki_certify to emit structured output.
* lib: Change key_generate to return the generated certificate.
* lib: Implement Debug for CertificationDiff.
* tool: Skip lint summary subsections when category is empty
* tool: Fix output file's permissions.
* Mark user IDs added by sq key userid add as authenticated
* lib: Convert expire to be a method and use the builder pattern.
* Move the implementation of sq key expire to the library.
* lib: Extend get_subkeys to allow skipping the primary key.
* lib: Extract utility function.
* lib: Don't export transitional functions.
* lib: Convert key::revoke to be a method and use the builder pattern.
* tool: Rename function.
* Move the implementation of sq key revoke to the library.
* lib: Convert userid::revoke to be a method and use the builder pattern.
* Move the implementation of sq key userid revoke to the library.
* lib: Convert subkey::revoke to be a method and use the builder pattern.
* Move the implementation of sq key subkey revoke to the library.
* Move revocation support trait and function to the library.
* lib: Convert userid::add to be a method and use the builder pattern.
* Move the implementation of sq key userid add to the library.
* lib: Convert subkey::add to be a method and use the builder pattern.
* Move the implementation of sq key subkey add to the library.
* lib: Move PasswordPolicy.
* lib: Fix documentation.
* Move the sq key generate implementation to the library.
* lib: Add CheckNewPassword::optional.
* tool: Fix typo.
* lib: Mark key::import::Builder::import_key as public.
* Move the certify_generated function to the library.
* Move the user ID linting functionality to the library.
* lib: Rework the certification diff functionality.
* lib: Add Expiration::from_operation_duration.
* lib: Fix comment.
* lib: Implement From<usize> for TrustAmount.
* lib: Implement PartialEq and Eq for TrustAmount.
* lib: Convert certify to be a method and use the builder pattern.
* lib: Make some functions const.
* lib: Improve error message when unable to verify a message.
* tool: Fix spelling.
* Gracefully deal with 404 HTTP result codes
* Treat certificates passed by fingerprint as authenticated
* Ignore revoked user IDs when updating approvals
* When displaying a certificate, sort the subkeys.
* tool: Don't panic if write fails
* Update keccak.
* Fix small documentation issues
* meta: Add Malte to the list of authors.
* tool: Restrict file permissions on sensitive output
* Update bytes.
* keystore: Upgrade capnp.
* Fix small typo
* CI: switch docker-image-push job to use dind
* Relax dirs dependency.
* tool: Avoid unnecessarily validating a certificate.
* tool: Don't panic on not existing cert
* lib: Correctly handle listing missing certificates.
* lib: Display key expiration time of 0 as 'never'
* lib: Display signature expiration time of 0 as 'never'
* tool: Fix sq verify's documentation.
* Improve temporary file handling.
* Update reqwest.
* Update sequoia-openpgp and sequoia-policy-config.
* meta: Update MSRV to 1.85.
* meta: Update signing policy.
* Move certification-related fucntionality to the library.
* lib: Change Sequoia::key_import to emit structured output.
* lib: Add functions to best-effort clone errors.
* lib: Fix the implementation of AddAssign for ImportStats.
* tool: When printing errors, specially handle more errors.
* tools: If the key store is not available, return a clap error.
* tool: Allow sq packet {armor,dearmor} to emit secret key material.
* Move key import to the library.
* lib: Don't export the verification helper.
* lib: Don't export the decryption helper.
* tool: Drop the packet dumper. Use the version from the library.
* lib: Reenable decryption in the packet dumper.
* lib: Resynchronize the packet dumper implementations.
* tool: Update indicatif from 0.17 to 0.18
* lib: Fix sq inspect to escape control characters in user IDs.
* lib: Change Sequoia::import to emit structured output.
* lib: Emit a message when a message is malformed.
* lib: Implement decrypt::Stream for &mut decrypt::Stream.
* lib: Improve decrypt's tracing output.
* lib: Fix wording.
* lib: The decrypt stream doesn't need to impl the verify stream.
* Move certificate importing to the library.
* Move import statistics to the library.
* Move provenance management to the library.
* Move `MyAsRef` to the library.
* meta: Add Malte as a committer.
* lib: Fix comment.
* Move signing to the library, change it to emit structured output.
* tool: Add FileOrStdout::create_safe_overwrite.
* Move the sign Mode type to the library.
* Move PartFileWriter to the library.
* lib: Change Sequoia::encrypt to emit structured output.
* lib: Implement From<&EncryptPurpose> for KeyFlags.
* lib: Don't sign with revoked certificates.
* lib: Change Sequoia::get_keys et al. to use structured errors.
* Move Sq::get_signer, etc. to the library.
* Move encryption to the library.
* tool: Modify Prompt to count the passwords.
* Move the method Sq::have_secret_key to the library.
* Move the CompressionMode type to the library.
* Move the EncryptPurpose type to the library.
* lib: When inspecting a key, indicate if an algorithm is not supported.
* lib: When inspect a key, also show the elliptical curve, if any.
* tool: When dumping a key, indicate if an algorithm is not supported.
* tool: When dumping a key, also show the elliptical curve, if any.
* lib: Change Sequoia::decrypt et al. to emit structured output.
* lib: Extend the prompting framework to allow checking the response.
* lib: Rename imports.
* lib: Improve the semantics of designated signers.
* lib: Make decrypt and decrypt_unwrap methods on Sequoia.
* Move decryption to the library.
* lib: Copy emit_cert to the library.
* lib: Implement Debug for PreferredUserID.
* lib: Change Sequoia::verify to emit structured output.
* lib: Improve the semantics of designated signers.
* lib: Rename VHelper to VerificationHelper.
* lib: Fix and improve some comments.
* lib: Export our own Result type.
* lib: Use a getter; don't expose the bare field.
* lib: Rename sq to sequoia.
* Move signature verification to the library.
* lib: Implement Prompt for Box<dyn Prompt> and &Prompt.
* lib: Silence new rustc warning about implicit lifetimes.
* lib: Silence new rustc warning about unnecessary parentheses.
* Move Sequoia::decrypt_key to the library.
* lib: Add user prompting to the library.
* lib: Add helper function, Sequoia::self_userid.
* Move the password cache to the library.
* Move the TrustThreshold type to the library.
* Move the inspect implementation to the library.
* lib: Partially copy the packet dumper to the library.
* Move the SessionKey type to the library.
* Move the best User ID functionality to the library.
* Move the certificate look up functionality to the library.
* Move the FileOrStdin and FileStdinOrKeyHandle types to the library.
* Copy the StdinWarning type to the library.
* Move the PreferredUserID type to the library.
* lib: Fix spelling.
* lib: Rework how Sequoia::list handles output.
* lib: Add a builder for calling Sequoia::list.
* Move certificate listing and authentication to the library.
* Copy some supporting types and functions to the library.
* lib: Move the policy into Config.
* lib: Reorganize Config and ConfigFile.
* lib: Don't implement PartialEq and Eq for Config.
* Move Convert to the library.
* Move ca_creation_time to the library.
* Move Safe to the library.
* Move TrustAmount to the library.
* Move Query and QueryKind to the library.
* Fix spelling.
* lib: Improve Config's and ConfigFile's documentation.
* lib: Add function to read the default configuration file.
* lib: Remove unused function ConfigFile::verify.
* lib: Rework ConfigFile.
* lib: Fix ConfigFile::default_config.
* lib: Don't take ownership when a reference will do.
* lib: Move help augmentations to sq.
* lib: Track the source of a configuration value.
* lib: Add getters for the configuration key and values.
* lib: Add getters for the various configuration settings.
* lib: Allow setting pki.vouch.certifier-self to the empty string.
* tool: Fix the configuration key for key servers in the help text.
* tool: Fix the configuration key for the key generation profile.
* lib: Check that the default config file is the default config.
* lib: Model the verbosity more precisely.
* Fix the help text for the --verbose and --quiet flags.
* lib: Fix the version reported in the template.
* lib: Rename constants to include a default prefix.
* lib: Don't hard code the default for network search dane usage.
* lib: Don't hard code the default for network search wkd usage.
* lib: Don't hard code the default for network search iterations.
* Move the configuration management to the library crate.
* Move the Expiration type to the library crate.
* Move the Profile wrapper type to the library crate.
* Move the CipherSuite wrapper type to the library crate.
* Move the Time type to the library crate.
* Move the SECONDS_IN_DAY and SECONDS_IN_YEAR consts to the library.
* lib: Rename Time to Clock to avoid a name collision.
* tool: Explicitly goodlist PreferredAEADCiphersuites for keeping.
* lib: Move the key store into struct Sequoia.
* tool: Use re-exports from the sequoia crate.
* lib: Move the cert store into struct Sequoia.
* lib: Move time into struct Sequoia.
* lib: Move the policy to struct Sequoia.
* tool: Move the policy into struct Sq.
* tool: Introduce accessor for the current time.
* tool: Remove superfluous attributes.
* tool: Remove dead code.
* tool: Don't needlessly pass around mutable references to Sq.
* lib: Turn comments into documentation.
* tool: Remove unused code.
* tool: Introduce accessor for the policy.
* lib: Fix documentation.
* Update optimizations for the RustCrypto crates.
* sq: Use sequoia to manage the home directory.
* lib: Add basic SequoiaBuilder and Sequoia types.
* Add a new workspace for the Sequoia library.
* Move most everything to a new workspace.
* Fix spelling mistakes.
* Add sq toc, which recursively lists all commands.
* Use the password cache to unlock keys on the softkey backend.
* Change try_decrypt to take a reference to the key.
* Use the reference time, not now.
* Improve tracing output.
* Update example
* Update tokio to address RUSTSEC-2025-0023.
* Update openssl to address RUSTSEC-2025-0022.
* Update crossbeam-channel to avoid yanked version.
* tests: Fix locating test artifacts at runtime.
* tests: Allow for in-vivo testing.
* Mon Oct 05 2026 Felix Niederwanger <felix.niederwanger@suse.de>
- Update dependencies due to bsc#1282203
- Add temporary lock for sequoia-wot@0.15.2 until next release due to build issues
- Add temporary lock for sequoia-cert-store@0.7.4 until next release due to build issues
* Mon Sep 28 2026 Felix Niederwanger <felix.niederwanger@suse.de>
- Update dependencies due to bsc#1282203
* Tue Sep 15 2026 Felix Niederwanger <felix.niederwanger@suse.de>
- Update to version 1.4.1:
* Release v1.4.1
* Update Cargo.lock.
* implement dumping of pqc artifacts
* Use the password cache to unlock keys on the softkey backend.
* Change try_decrypt to take a reference to the key.
* Use the reference time, not now.
* Update h2.
* Update sequoia-openpgp.
* Mon Aug 17 2026 Lubos Kocman <lubos.kocman@suse.com>
- Legal review Change main license to LGPL-2.0-or-later from GPL-2.0-only
* LICENSE.txt confirms it
* Correct Legal-Review-Notice usage
* Tue Aug 11 2026 Felix Niederwanger <felix.niederwanger@suse.de>
- Update dependencies (bsc#1274437)
* Tue Jul 14 2026 Felix Niederwanger <felix.niederwanger@suse.de>
- Update dependencies
* Tue Jul 14 2026 Felix Niederwanger <felix.niederwanger@suse.de>
- Switch crypto backend from nettle to openssl due to bsc#1257934 (Patch 0001-Use-openssl.patch)
* Wed Jul 08 2026 Felix Niederwanger <felix.niederwanger@suse.de>
- Update to version 1.4.0:
* Release v1.4.0.
* Update crossbeam-epoch.
* Enable optimizations when building rust-crypto crates.
* tool: canonicalize Ord and PartialOrd impls for Association
* tool: silence clippy error for potentially mutable Map key types
* tool: fix formatting to avoid leaking comments into doc strings
* clippy: allow two types with interior mutability for BTreeSet keys
* lib: avoid potentially panicking integer cast
* clippy: add default lint configuration
* Update NEWS.
* lib: Improve control char escaping
* tool: Fix output file's permissions.
* Gracefully deal with 404 HTTP result codes
* tool: Don't panic if write fails
* tool: Restrict file permissions on sensitive output
* Improve temporary file handling.
* Forward allow-* crypto features.
* Relax rusqlite dependency.
* tool: Add more cipher suites.
* tool: Add sq key generate --{encryption,signing}-algorithm.
* Update Cargo.lock.
* Relax subplot dependency.
* Relax roff dependency.
* Relax toml_edit dependency.
* Upgrade sequoia-wot.
* Relax indicatif dependency.
* Relax gethostname dependency.
* Relax dirs dependency.
* Relax clap_lex dependency.
* Update Cargo.lock.
* meta: Bump MSRV to 1.85.
* Update signing policy.
* Wed May 06 2026 Felix Niederwanger <felix.niederwanger@suse.de>
- Update vendored dependencies due to build issues
* Tue Aug 19 2025 Felix Niederwanger <felix.niederwanger@suse.de>
- Update vendored dependencies due to security issues
* Thu Apr 10 2025 Felix Niederwanger <felix.niederwanger@suse.de>
- Update to version 1.3.1:
* Release 1.3.1.
* Fix formatting.
* Improve documentation of `sq config`.
* Emit hints to mark an imported key as authenticated or introducer.
* Hedge against importing keys into the cert store.
* Improve displaying of preferred user IDs.
* Fix typo.
* Display backtraces attached to errors.
* tests: Avoid DSA key in tests as DSA will be rejected in the future.
* tests: Update PKI test vectors to not expire.
* Enable backtraces and tracing when running tests.
* Make importing Autocrypt certs more robust.
* Release 1.3.0.
* Make sq config get print to stdout.
* Fix early abort in sq keyring filter
* Fix test sq_verify_policy_as_of_relative_time
* Fix error message.
* Prefix matching for --...-self parameters fixed
* Fix examples.
* Port to sequoia-openpgp 2.
* ci: Always build the pages, but only publish when merging to main.
* Upgrade sequoia-man.
* Split out the man page generation into a new crate.
* Update openssl to address RUSTSEC-2025-0004.
* Update hickory-proto to address RUSTSEC-2025-0006.
* man: Fix NAME section for subcommands.
* Tue Feb 04 2025 felix.niederwanger@suse.de
- Update to version 1.2.0:
* Release 1.2.0.
* Update Cargo.lock.
* Use authenticated identifiers in sq verify.
* Improve quoting.
* Improve sq download's output.
* Add a parameter to the authenticate function to control the output.
* Move helper function to common.
* Add a mechanism to replace an argument in a hint with a placeholder.
* Avoid crash parsing arguments to Strings.
* Make sq cert lint less quiet when there are no issues.
* Add sq key rotate.
* Extend replay to optionally take a signer.
* tests: Move utility function to the common module.
* Move function to the common module.
* Extend replay to allow the caller to limit what is replayed.
* Improve output.
* Allow the caller to specify an indentation level.
* Disable tracing.
* Fix test helper function.
* Add sq pki vouch replay.
* Move certification listing code to the common module.
* Move code in common to the sole function that uses it.
* Move the sq pki link list implement to its own module.
* Extend sq pki vouch list to list certifications of a certificate.
* Improve test.
* Simplify specifying certificate designators in tests.
* Require that certificate designators are authenticated.
* Use an explicit type for the trust amount parameter.
* Fix sq --cli-version.
* Improve sq pki link list's help text.
* Improve error messages.
* Avoid unnecessary lookups.
* Relax sq pki link list's certificate designators.
* Fix examples.
* Don't export non-exportable sigs and components when exporting keys.
* Add missing NEWS entry.
* Fix duplicating packets when dumping.
* Prevent monomorphization of Sq::resolve_cert.
* Prevent monomorphization of Sq::resolve_certs_filter.
* Add new command sq pki vouch list.
* Move the code for listing certification to common.
* Release 1.1.0.
* Relax subplot dependency.
* Relax rusqlite dependency.
* Update Cargo.lock.
* Fix output.
* Add a lint for uncertified user IDs.
* Show certificates without user IDs with --gossip.
* Improve sq cert list's documentation.
* Improve help text lints.
* Fix long help generation for cert designators.
* Update NEWS file.
* Add option --unusable to sq cert list, etc.
* Show hints about unusable bindings when --gossip is provided.
* Change how we refer to unusable bindings in sq cert list.
* Change sq cert list to not show warnings if --quiet is given.
* Distinguish unauthenticated and invalid bindings in sq cert list.
* Improve linting for sq cert list.
* Don't list revoke user IDs.
* Fix listing certificates by fingerprint or key ID.
* Remove duplicate code.
* Rework sq cert list's human readable output.
* Improve UserIDDesignator::argument_value.
* Fix UserIDDesignator::argument_value.
* Add some helper functions.
* tests: Add tests for sq cert list.
* Fix sq cert list --gossip.
* Fix output.
* Release 1.0.0.
* Fix NEWS.
* Align `sq download` with `sq verify`.
* Fix displaying preferred user IDs.
* Write to temporary file first, then persist it under the final name.
* Avoid using absolute paths in name of scratch files.
* Automatically import certificates from GnuPG's certificate store.
* Escape user IDs.
* Escape preferred keyserver and policy URI.
* Escape notation name and data.
* Escape literal data file name and data prefix.
* Escape all regular expressions.
* Escape all reason for revocation messages.
* Improve output sanitization.
* Use the visual idiom for cert,userid pairs authenticating downloads.
* Use the visual idiom for cert, userid pairs when decrypting.
* Use the visual idiom for cert, userid pairs when importing revs.
* Use the visual idiom for cert, userid pairs when certifying.
* Improve argument and value formatting in hints.
* Improve help output.
* Revert "Refine sq pki {authenticate,lookup}'s user ID designators."
* Fix commands embedded in the documentation.
* Make verifying detached signatures more efficient.
* Require sequoia-openpgp 1.22.
* Fix hint.
* Refine sq key userid revoke's user ID designators.
* Refine sq pki vouch {add,authorize}'s user ID designators.
* Refine sq pki {authenticate,lookup}'s user ID designators.
* Refine sq pki link retract's user ID designators.
* Refine sq pki link {add,authorize}'s user ID designators.
* Add sq pki path --userid-by-email.
* Gracefully handle unencrypted Autocrypt messages.
* Align output emitted when importing certificates.
* Don't unconditionally show provenance messages.
* Fix importing unencrypted Autocrypt messages.
* Improve error handling opening the cert store.
* Do not hide errors from keyrings in verify.
* Refactor packet and keyring files in /cli to new example framework.
* Refactor files in /cli/network to new example framework.
* Refactor files in /cli/pki to new example framework.
* Refactor files in /cli to new example framework.
* Remove the unstable CLI warning.
* Don't make impossible recommendations.
* Remove useless code.
* Disable the --name and --add-name arguments.
* Rename --userid-or-add to --add-userid, etc.
* Extend and adjust the set of user ID designators.
* Refactor the user ID designators.
* Update all dependencies.
* Fix test.
* Trim unused features on sequoia-cert-store.
* Update sequoia-net and reqwest.
* Add argument `sq network search --iterations`.
* Add argument `sq network search --use-dane`.
* Add argument `sq network search --use-wkd`.
* Better handle user ID's matched by --all.
* Make --all conflict with other user ID designators.
* Fix test for sq pki link retract.
* Make `sq cert list` display certificates without user IDs.
* Prepare for userid-less certificates in common::pki::authenticate.
* Split OutputFormat::add_paths into two functions.
* Fix listing certificates without authenticated bindings.
* Apply the input lints to all certs.
* Only show hints about an empty cert store if it is indeed empty.
* Change `sq config inspect policy` to explain the policy.
* Fix warnings about elided lifetimes that have a name.
* Add tests for sq key approvals update.
* tests: Improve sq key approvals update help functions.
* Add tests for sq key approvals list.
* Add tests for sq key userid revoke.
* Add tests for sq pki lookup.
* Add tests for sq pki authenticate.
* Add tests for sq pki vouch {add,authorize}.
* tests: Rename Sq::pki_vouch_authorize_p.
* tests: Simplify Sq::try_pki_vouch_add and Sq::pki_vouch_authorize_p.
* Add tests for sq pki link retract.
* Add tests for sq pki link authorize.
* Add tests for sq pki link add.
* Simplify comments.
* Lint CLI help texts.
* Align CLI help texts with our UI guidelines.
* Make long help texts configurable for cert designators.
* Deduplicate and rework the signature notation argument handling.
* Require explicit opt-out for encrypting without signing.
* Use cert designators for `sq cert list`.
* Add examples for `sq cert list`
* Refactor files in /cli/cert to new example framework
* Modify examples
* Refactor files under .../cli/key to use example framework
* Fix generation of user ID-less keys.
* Upgrade hickory-proto to avoid vulnerable idna 0.4.0.
* Gracefully handle missing ui section in config file.
* Add `sq encrypt --profile` in preparation for RFC9580.
* Add `sq key generate --profile` in preparation for RFC9580.
* Parse key.generate.cipher-suite case sensitively.
* Mention the configuration key in the augmented help texts.
* Make `sq network dane generate` require cert designators or `--all`.
* Make `sq pki link list` fail if a designated cert has no link.
* Refactor user ID matching when resolving certificates.
* Generalize the filter for `Sq::resolve_certs_filter.
* Align `sq sign --detached-file` with `sq verify --detached-file`.
* Make the default third-party certification expiration configurable.
* Introduce a specialization for third-party certifications.
* Make ExpirationArg configurable.
* Manually implement clap::Args for ExpirationArg.
* Add tests for sq pki link list.
* Add tests for sq key list.
* Listing an empty certificate store should not be an error.
* Fix hint.
* Hide --without-password from the sq key generate examples.
* Make it possible to hide parts of an example.
* Change the default third-party certification expiration to 10y.
* Implement `sq pki vouch {add,authorize} --certifier-self`.
* Improve the `--self-signer` help texts and add to the template.
* Add a pattern argument to `sq pki link list`.
* Add missing conflict for `sq key list`.
* Change sq config inspect network to use stdout.
* Change sq config inspect paths to use stdout.
* Change sq cert import and sq key import to use stdout.
* Improve sq network wkd publish's output.
* Change sq network wkd publish to use stdout.
* Convert a hint to a warning.
* Change sq network keyserver publish to use stdout.
* Change sq pki link add, etc. to use stdout.
* Generalize make_qprintln to write to a different stream.
* Change sq pki link list to use stdout.
* Before printing a hint, flush stdout.
* Change sq cert list, sq pki authenticate, etc. to use stdout.
* Generalize the authentication output routines to use any stream.
* Change sq key approvals list to use stdout.
* Change sq key list to use stdout.
* Add new macro wwrintln.
* Generalize weprintln and iweprintln to write to any stream.
* Rename wprintln to weprintln.
* Clean up sq key list's output.
* Implement `sq config inspect network`.
* Implement `sq config inspect paths`.
* Implement `sq config inspect policy`.
* Make `sq key list` fail without key store, align error messages.
* Align error messages when listing certs.
* Import the secret key so that the example has something to list.
* Change sq inspect to show the cert associated with a recipient.
* policy: Update certificates.
* Simplify code.
* Remove unreachable code.
* Fix resolving `--signer-self`.
* Improve formatting of message.
* Implement `sq sign --signer-self` and `sq encrypt --signer-self`.
* Make the number of iterations configurable for `sq network search`.
* Make use of DANE configurable when doing `sq network search`.
* Make use of WKD configurable when doing `sq network search`.
* Make the path to the backend servers configurable.
* Fix displaying effective configuration.
* Make hints configurable.
* Generalize function.
* Make verbosity configurable.
* Introduce accessors for sq.quiet and sq.verbose.
* Use platform-specific prompt in hints.
* Indent hints so that they look different from shell prompts.
* Improve the `--for-self` encryption hint.
* Don't show hint if a recipient is listed in encrypt.for-self.
* Don't explicitly create `Recipient`s.
* Show the configuration file's location in sq config --help.
* Fix message.
* Display a hint if encrypting a message that one can not decrypt.
* Implement `sq encrypt --for-self`.
* When encrypting a message, list signers.
* When encrypting a message, list recipients and passwords.
* Use BufferedReader::copy to avoid an extra copy.
* Rework encryption subkey selection.
* Fix handling of `--home=default` and `--home=none`.
* Drop superfluous mut.
* Align user ID designators in `sq pki link retract`.
* Add support for addressing shadow CAs by symbolic names.
* Make `sq config get policy.path` reflect SEQUOIA_CONFIG_POLICY.
* Fri Jan 03 2025 felix.niederwanger@suse.com
- Update to version 1.1.0:
* Release 1.1.0.
* Relax subplot dependency.
* Relax rusqlite dependency.
* Update Cargo.lock.
* Fix output.
* Add a lint for uncertified user IDs.
* Show certificates without user IDs with --gossip.
* Improve sq cert list's documentation.
* Improve help text lints.
* Fix long help generation for cert designators.
* Update NEWS file.
* Add option --unusable to sq cert list, etc.
* Show hints about unusable bindings when --gossip is provided.
* Change how we refer to unusable bindings in sq cert list.
* Change sq cert list to not show warnings if --quiet is given.
* Distinguish unauthenticated and invalid bindings in sq cert list.
* Improve linting for sq cert list.
* Don't list revoke user IDs.
* Fix listing certificates by fingerprint or key ID.
* Remove duplicate code.
* Rework sq cert list's human readable output.
* Improve UserIDDesignator::argument_value.
* Fix UserIDDesignator::argument_value.
* Add some helper functions.
* tests: Add tests for sq cert list.
* Fix sq cert list --gossip.
* Fix output.
* Thu Dec 19 2024 felix.niederwanger@suse.com
- Update to version 1.0.0:
* Release 1.0.0.
* Fix NEWS.
* Align `sq download` with `sq verify`.
* Fix displaying preferred user IDs.
* Write to temporary file first, then persist it under the final name.
* Avoid using absolute paths in name of scratch files.
* Automatically import certificates from GnuPG's certificate store.
* Escape user IDs.
* Escape preferred keyserver and policy URI.
* Escape notation name and data.
* Wed Dec 04 2024 felix.niederwanger@suse.de
- Update to version 0.40.0:
* Release 0.40.0.
* Support thiserror 2.0.
* Update Cargo.lock.
* Mark `sq keyring filter` experimental.
* Update MSRV to 1.79, which is subplot's current MSRV.
* Add a configuration file and associated management commands.
* Align user ID designators in `sq pki {link,vouch} {add,authorize}`.
* Require self-signed user IDs when publishing certs in a WKD.
* Update sequoia-keystore to 0.6.2.
* Remove argument `sq key subkey export --cert-file`.
* Fix message.
* Remove argument `sq cert lint --export-secret-keys`.
* Change sq pki link retract to use the NULL policy.
* Improve hint.
* To revoke a user ID, require the cert be valid under the current policy.
* Improve message when a certificate can't be used for encryption.
* tests: Add more tests for sq encrypt.
* Don't use revoked certificates for encryption.
* Improve sq key password's output.
* Make sq key password change the password of weakly bound keys.
* tests: Add tests for sq key password.
* Improve how sq key delete handles ambiguous associations.
* Change sq key {delete,password} to work with more certificates.
* Change sq key delete to refuse to work with weakly bound subkeys.
* Update to subplot 0.11.0.
* Fix hint.
* Improve documentation.
* New mandatory switches `sq key generate <--own-key|--shared-key>`.
* Improve status messages when publishing a WKD.
* Fix copying the policy file if no updates happened.
* Make `sq network wkd publish` work without a cert store.
* Change sq key subkey {password,delete} to work with weak bindings.
* Rename --notation to --signature-notation.
* Add `sq encrypt --signature-notation`.
* Fix examples.
* Add missing examples for the network commands.
* Add a builder-style interface to the example framework.
* Certify newly created keys with a per-host shadow CA.
* Differentiate the help texts for `--notation` slightly.
* Fix sq cert lint.
* Check for the cert / key store before doing work.
* Improve no cert store / no key store error messages.
* Catch clap errors, and display them better.
* Rename `sq pki vouch certify` to `sq pki vouch add`.
* Make `sq key import` read from stdin if no files are given.
* Move the CLI parser for sq key import to its own module.
* update container examples in readme
* make container a single-user environment
* add dockerignore file
* add bash completion and manpages to container
* improve OCI compatibility of Containerfile
* rename Dockerfile to vendor-neutral Containerfile
* Change sq network wkd generate to avoid unnecessary churn.
* Improve sq network wkd generate's error messages.
* Fail if the user tries to create an empty WKD.
* Make sq network wkd publish more chatty.
* Make sq network wkd publish more robust.
* Fix sq packet join to not panic if there is no input.
* Show an issuer's user ID, if we know it.
* Rename sq packet split --prefix to --output-prefix.
* Add a hint to sq packet split's output.
* Change sq packet split to write to stdout by default.
* Improve the "waiting for input on stdin" message.
* Limit width when wrapping help texts to increase readability.
* Use a simpler word separator algorithm to keep URLs intact.
* Don't break lines if stderr is not a terminal.
* Don't limit the width of emitted text.
* Remove `sq toolbox extract-cert`.
* Remove test framework for toolbox strip-userid.
* Fix hints to do packet dump.
* Change sq decrypt to not use rpassword directly.
* Change sq decrypt to respect --batch.
* Make `sq cert lint` read from stdin again.
* Only display hint for live certs.
* Align spelling of cert-store with the command line argument.
* Show sources of data when fetching certs over the network.
* In sq key list, prefer weakly bound user IDs to nothing.
* Change sq key list to display more user IDs.
* Refactor common::get_keys to be less clever.
* Fix sq pki path to use Sq::resolve_cert.
* Remove unnecessary lookup.
* Fix documentation.
* Don't add approvals for non-exportable certifications or certs.
* Move the ca_creation_time function to the common module.
* Change the packet dumper to show the issuer, when available.
* Remove the `--binary` flag from all commands emitting certs or keys.
* Use `--cert-` prefix for all cert designators.
* Remove `sq toolbox strip-userid`.
* Turn `sq key approvals --add-authenticated` into a flag.
* When searching by fingerprint, show any unauthenticated certificate.
* Rearrange the order of the user ID designator arguments.
* Rename --add-userid to --userid-or-add, etc.
* Add support for examples that are only syntax checked.
* Add some tracing.
* Fix sq cert list for fingerprints and key IDs.
* Implement From<KeyHandle> for CertDesignators.
* When listing who made a certification, show the fingerprint.
* When listing approvals, indicate whether there are any pending.
* Make sq key approvals more transparent.
* Make sq key approvals update require an action.
* Lint user IDs that would be added and are not self signed.
* Rename sq toolbox dearmor to sq packet dearmor.
* Rename sq toolbox armor to sq packet armor.
* Move sq toolbox packet to sq packet.
* Move sq toolbox keyring to sq keyring.
* Fix comment.
* tests: Fix check.
* Show standard usage if no arguments are supplied to sq cert export.
* Port sq toolbox userid-strip to the user ID designator framework.
* Port sq cert list and two more to the user ID designator framework.
* Upgrade sequoia-wot.
* Move the authenticate function to its own module under common.
* Improve the format of error messages for failing examples.
* Revise the authenticate code's linting.
* Port sq pki {authenticate,identify} to the cert designator framework.
* Move the sq pki identify cli definition to its own module.
* Move the sq pki lookup cli definition to its own module.
* Move the sq pki authenticate cli definition to its own module.
* Improve documentation.
* Expand ~ in state directories.
* Make `sq encrypt --set-metadata-filename` take a simple string.
* Remove `sq encrypt --set-metadata-time`.
* Port sq pki path to the user ID designator framework.
* Add support for adding a user ID by display name.
* Make sq pki path's user ID argument a named argument.
* Move the sq pki path cli definition to its own module.
* Move the sq pki path implementation to its own module.
* Make `sq download --output` mandatory.
* Port sq key userid revoke to the user ID designator framework.
* Add support for adding a user ID by display name.
* When printing self-signed user IDs, also show invalid user IDs.
* Port sq key approvals update to the user ID designator framework.
* Port sq key approvals list to the user ID designator framework.
* Add support for designating a self-signed user ID by display name.
* Improve naming.
* Optimize downloading of data files with detached signatures.
* Forbid `--output` when verifying detached signatures.
* Add note.
* Cause sq download to fail faster if the output file can't be used.
* Split the argument `sq network wkd publish --create` into two.
* Use cert designators for the signer arguments of `sq encrypt`.
* Use cert designators for the signer arguments of `sq sign`.
* Change --email and --add-email to only match user IDs unambiguously.
* Add `sq sign --mode` to create binary or text signatures.
* Change --add-userid from a flag to two arguments.
* Generalize active_certifications.
* tests: When calling sq pki authenticate include --show-paths.
* tests: Abstract user ID argument passing.
* Drop debugging remnant.
* Replace `--no-cert-store` and `--no-key-store`.
* Make home directory optional.
* Introduce accessors.
* Require explicit mode, and align `sq sign` and `sq verify`.
* Make tests less expensive.
* Change sq key list to not filter out unauthenticated certificates.
* Add a DWIM search parameter to sq key list.
* Remove `sq cert lint --list-keys`.
* Set signature creation times closer to where the builder is created.
* Expand the designated signers to user ID, email, and domain queries.
* Use only designated signers to verify signatures.
* Make `sq pki link add` honor `sq --time`.
* Move struct VHelper to commands::verify.
* Disable the help subcommand everywhere except at the top-level.
* Add new command sq download.
* Don't move when passing a reference will do.
* Add new argument, --cli-version, to require a CLI version.
* Rename OutputVersion to Version and move it to its own module.
* Fix sq toolbox packet dump's help text.
* Don't show the progress bar if --batch is specified.
* Print out the certificate that decrypted a message.
* Show more information about certificates in sq key list.
* Normalize output.
* Show more information about certificates in sq cert list.
* Finish renaming attestation to approval.
* Make sq key expire's expiration argument required.
* Use key designators for sq key subkey revoke.
* Fix documentation.
* Use key designators for sq key subkey {delete,password}.
* Change sq key subkey export to require the certificate to export.
* Move the bind module.
* Move the sq key subkey revoke implementation to its own module.
* Move the sq key subkey expire implementation to its own module.
* Move the sq key subkey password implementation to its own module.
* Move the sq key subkey delete implementation to its own module.
* Move the sq key subkey export implementation to its own module.
* Move the sq key subkey add implementation to its own module.
* Move cli parser for sq key subkey bind to its own module.
* Move cli parser for sq key subkey revoke to its own module.
* Move cli parser for sq key subkey expire to its own module.
* Move cli parser for sq key subkey password to its own module.
* Move cli parser for sq key subkey delete to its own module.
* Move cli parser for sq key subkey export to its own module.
* Move cli parser for sq key subkey add to its own module.
* Add a new key designator type.
* Use more qualified names to reduce ambiguity.
* Don't extend the expiration of invalid components.
* Change sq key subkey bind to use the expriation type.
* Extend Time to support relative timestamps.
* Move the Time type to its own module.
* Make it clearer that we don't support ISO 8601 durations.
* Dry out sq key expire's expiration argument.
* Add a global option, --policy-as-of, to select a crypto policy.
* If decryption fails, delete the output file.
* tests: Generalize Sq::encrypt and Sq::decrypt to work with files.
* If signature verification fails, delete the output file.
* Add support for merging bare revocation certificates.
* Dry out the keyring merge function.
* Mon Nov 04 2024 felix.niederwanger@suse.de
- Update to version 0.39.0:
* Release 0.39.0.
* Loosen reqwest dependency.
* Loosen subplot dependency.
* Upgrade terminal_size.
* Upgrade sequoia-policy-config.
* Update Cargo.lock.
* Fix various typo in the NEWS file.
* Add support for importing bare revocation certificates.
* Rework signature verification output.
* Don't let bad signatures override good signatures.
* When reading from stdin, emit a warning if we don't get any input.
* Improve sq encrypt's examples to better reflect best practices.
* Improve the error message shown when sq encrypt gets no recipients.
* Make sq key userid revoke's positional arguments named arguments.
* Make sq key subkey revoke's positional arguments named arguments.
* Make sq key revoke's positional arguments named arguments.
* Dry out --expiration.
* Move the Expiration type to its own module.
* Make sq key expire's expiration argument a named argument.
* Make sq key subkey expire's expiration argument a named argument.
* Improve error messages.
* Improve message.
* Fix how user IDs are displayed.
* When displaying a gossip path, show the path's trust amount.
* Fix self signature check.
* Fix how paths for self signatures are displayed.
* Rework gossip.
* Upgrade sequoia-wot.
* Remove sq pki path's --gossip argument.
* tests: Dry out certificate handling.
* Use cert designators for the certifier in `sq pki vouch authorize`.
* Use cert designators for the certifier in `sq pki vouch certify`.
* Remove the pEp store integration.
* Add `--output` and `--binary` arguments to `sq key subkey export`.
* Add `--output` and `--binary` arguments to `sq key export`.
* Add an `--output` argument to `sq cert export`.
* Use cert designators for `sq toolbox packet dump`.
* Use cert designators for `sq toolbox strip-userid`.
* Add `sq network keyserver publish --domain`.
* Use cert designators for `sq key approvals update`.
* Use cert designators for `sq key approvals list`.
* Use cert designators for `sq key subkey bind`.
* Use cert designators for `sq key subkey revoke`.
* Use cert designators for `sq key subkey expire`.
* Use cert designators for `sq key subkey password`.
* Use cert designators for `sq key subkey delete`.
* Improve wrapping of examples.
* Use cert designators for `sq key subkey add`.
* Use cert designators for `sq key userid revoke`.
* Use cert designators for `sq key userid add`.
* Use cert designators for `sq key revoke`.
* Avoid heap allocation if we don't change the help text.
* Use cert designators for `sq key expire`.
* Use cert designators for `sq key password`.
* Cleanup.
* Move the CLI parser for `sq key password` to its own module.
* Improve wrapping of examples.
* Use cert designators for `sq cert lint`.
* Consolidate import stat printing more.
* Fix and add hints for when no certs matched.
* Fix updating import statistics.
* Make `sq key delete --file` require `--output`.
* Use cert designators for `sq key delete`.
* Move the command line parser for `sq key delete` to its own module.
* Use cert designators for `sq key export`.
* Introduce a symbolic name for the default empty options.
* Move the command line parser for `sq key export` to its own module.
* Use cert designators for `sq key list`.
* Move the command line parser for `sq key list` to its own module.
* Use cert designators for `sq inspect`.
* Use cert designators for `sq verify`.
* Use cert designators for `sq decrypt`.
* Change --cert to only look up by primary key fingerprint.
* Raise limit of stdout and stderr shown in tests.
* Add filters to `sq pki link list`.
* Adapt fingerprint, user ID pairs display in link listings.
* Tweak edge annotations.
* Rework how fingerprint, user ID pairs are displayed.
* Merge `sq autocrypt import` into `sq cert import`, remove others.
* Implement AddAssign for ImportStats.
* Parse certificates from a Dup reader.
* Remove the Autocrypt gossip CA framework.
* Print error chains at the top level.
* Improve formatting of error chains.
* Remove obsolete TODOs.
* Make `sq inspect` handle non-OpenPGP data.
* Fix hint formatting.
* Enable the use of state in the subplot tests.
* Set a SEQUOIA_HOME directory for the subplot tests.
* Remove the DWIM interface from `sq cert export`.
* Fix mutability of recipient in accessors.
* Only export certificates with authenticated bindings.
* Remove obsolete todos.
* Hide certification and key creation times for shadow CAs.
* Remove redundant trust amount information.
* Use non-breaking hyphens to format dates.
* Filter out self-signatures when `--gossip` is given.
* Remove now unused non-concise human readable output format.
* Make the path output a little less dense.
* Merge the path printing into the concise human readable output.
* Align the output of `sq cert list` with `sq key list`.
* Align timestamp formatting.
* Align hint formatting.
* Split `sq network wkd publish --rsync` into two to avoid ambiguity.
* Fix documentation.
* Rename `sq verify --signer-cert` to `--signer`.
* Simplify crate::load_keys.
* Simplify crate::load_certs.
* Add `--all` flag to `sq network wkd publish` and `dane generate`.
* Use imperative mood to describe the cert and user ID designators.
* Make `sq --home=default` work.
* Remove `sq network dane generate --skip`.
* Move sq pki list to sq cert list.
* Rename test files.
* Add a test.
* Don't try to certify invalid user IDs.
* Make it easier to debug failing examples.
* Move sq pki {certify,authorize} under sq pki vouch.
* Split authorization functionality out of sq pki link add.
* Generalize helper function.
* Reorder sq pki link add's options.
* Dedup user IDs.
* Identify common user errors when verifying detached signatures.
* Fix example description.
* Make `inspect` return the kind of data it thinks it is looking at.
* Port sq pki link retract to the user ID designator framework.
* Don't require --add-userid if that option isn't enabled.
* Improve output when retracting a link.
* Fix sq pki link retract when retracting all certifications.
* Check all user IDs, not just self-signed user IDs.
* Align sq pki link add's user ID specification with sq pki certify.
* Remove sq pki link retract's positional argument for specifying a user ID.
* Remove sq pki link add's positional argument for specifying a user ID.
* Change sq pki link retract to use a named argument for the certificate.
* Change sq pki link add to use a named argument for the certificate.
* Add `sq cert export --local` to export non-exportable sigs.
* Show more information about downloaded certificates.
* Support indentation parameters in qprintln.
* Fix hint.
* Check that we don't certify our own certificate.
* Refactor user ID resolution.
* Add a user ID designator abstraction.
* Extend sq pki authorize to constrain by domain.
* Move the domain to regex conversion functionality to common.
* Don't specify value_name twice for a single argument.
* Add new subcommand sq pki authorize.
* Generalize Sq::pki_certify to certify multiple user IDs at once.
* Reorder sq pki certify's options.
* Change sq pki certify to use a named argument for the certificate.
* Extend the cert designator framework to support required arguments.
* Change sq pki certify to use a named argument for the user ID.
* Refactor sq pki certify, sq pki link add and sq pki link retract.
* Add a None variant to the TrustAmount enum.
* Simplify the active_certification utility function.
* Emit a hint if `sq cert import`ing a key.
* Drop the free-form command hint interface.
* Make all command hints use the structured hint framework.
* On debug builds, parse the emitted hints and panic if that fails.
* Add a structured command hint framework.
* Emit hint on how to extract a particular certificate.
* Move function.
* Always list found certificates, and reword the message.
* Rename `sq network fetch` to `search`, likewise hkp, WKD, and DANE.
* Merge certificates fetched from the network earlier.
* Move type ImportStatus.
* Unify key and cert import stats, be explicit about what is imported.
* Add a test to execute some sanity checks against the CLI.
* Make `--rev-cert` argument mandatory if `--output` has been given.
* Improve some integration tests to use more of the test framework.
* Remove `sq network keyserver publish --require-all`.
* Always print the error message in addition to propagating it.
* Emit a hint that the Mailvelope key server rejects some certs.
* Augment usage messages with examples.
* Slightly indent the pointer to the global arguments.
* Provide helpful guidance if there are no secret keys.
* Make `sq key generate --rev-cert` behave like other outputs.
* Move CLI definition of `sq key generate` to its own module.
* Display the signers cert fingerprint when inspecting artifacts.
* Fix formatting.
* Return the selected certificate from Sq::best_userid_for.
* Make Sq::best_userid_for work with use_wot=false.
* Improve best user ID computation.
* Improve certificate lookups when computing best user ID.
* Use cheaper predicate to see if an iterator is empty.
* Make `sq toolbox keyring filter --handle` robust.
* Apply the cert filter only once.
* Add tests for `sq toolbox keyring filter`.
* Run tests in a separate working directory.
* Deduplicate function to locate test artifacts.
* Change sq pki certify to reject expired and revoked certs.
* Don't word-wrap commands in hints.
* Fix hints emitted when fetching certs from the network.
* Improve hint formatting.
* Add an explicit output parameter for `sq toolbox packet split`.
* Align the value-name for --home.
* Add an ENVIRONMENT section to the top-level man page.
* Rename environment variables to override cert and key store.
* Use a custom CLI parser for state directories.
* Improve documentation for sq key expire and sq key subkey expire.
* Don't extend the expiration of subkeys that are hard revoke.
* Add a unit test for sq key subkey expire for soft revocations.
* Add a unit test for sq key subkey expire for unbound subkeys.
* Normalize naming.
* Fix setting a certificate's expiration time.
* Fix setting a certificate's expiration time.
* Fix documentation.
* Fix capitalization of example section in help texts.
* Port cert lint examples to the example framework.
* Port keyring examples to the example framework.
* Implement examples containing pipelines.
* Add missing example data file bob.pgp.
* Port dearmor examples to the example framework.
* Port armor examples to the example framework.
* Port extract-cert examples to the example framework.
* Port link examples to the example framework.
* Fix line wrapping when printing examples.
* Update futures-util (and related packages).
* Don't call exit, just return an error.
* Fix example.
* Use cert designators for `sq network keyserver publish`.
* Use cert designators for `sq network wkd publish`.
* Use cert designators for `sq network dane generate`.
* Prevent cert designators from over-eagerly grabbing other options.
* Fix composing cert designators.
* Make the domain argument a long argument like in wkd publish.
* Improve listing of secret keys.
* Fix argument name computation.
* Rename `sq encrypt --recipient` to sq encrypt --for`.
* Rename `--recipient-cert` to `--recipient`.
* Rename `--signer-key` to `--signer`.
* Rename the global `--force` flag to `--overwrite`.
* New flag `sq pki link add --recreate` instead of `--force`.
* New flag `sq key userid revoke --add-userid` instead of `--force`.
* Make the file creation utilities take a reference to Sq.
* Move some file support code so that it can use Sq.
* Rename `sq verify --detached` to `sq verify --signature-file`.
* Fix changing the expiration time on keys without direct key sig.
* Add missing NEWS entry.
* Rename sq key subkey adopt to bind, improve documentation.
* Move sq key adopt to sq key subkey adopt.
* Improve warning message.
* Port the examples of sq toolbox packet to the examples framework.
* Improve and fix the documentation of sq toolbox packet split.
* Fix splitting and joining packets with bodies, such as literals.
* Improve the file names when splitting packet streams.
* Emit a hint when trying to sq key import a certificate.
* Deduplicate subkey arguments when revoking subkeys.
* Introduce a switch to select the type of DNS resource records.
* Fix adopting subkeys backed by the softkeys backend into softkeys.
* Allow source certs to be ambiguous when adopting a key.
* Avoid file descriptor exhaustion when fetching certificates.
* Disregard bad information in the signers user ID subpacket.
* Use the cert fingerprint in messages, not the signing subkeys keyID.
* Fix hints.
* Bump MSRV to 1.75.
* Remove redundant long_about.
* Fix hint.
* Fix long about strings so that they line wrap.
* Escape newlines in help text to enable automatic line wrapping.
* Fix spelling.
* Don't dump bad signatures by default, add CLI switch for that.
* Dump bad signatures.
* Rework indentation in the inspect module.
* Refactor signature dumping.
* Refactor key dumping.
* When adopting a key, if the creation time is unset, set it.
* Add the --creation-time argument to sq key adopt.
* When adopting a key, error out if the key's key flags is empty.
* Allow modifying the key flags when adopting a key.
* Don't require a key being adopted to have a binding signature.
* Make the test helper function Sq::key_adopt more consistent.
* Simplify how tests call sq key adopt.
* Allow tests to pass addition arguments to sq key adopt.
* Tighten the sq encrypt tests.
* Switch sq encrypt to the certificate designator abstraction.
* Switch sq cert export to the certificate designator abstraction.
* Fix sq cert export test vector.
* Add a certificate designator abstraction.
* Add a test for sq encrypt for revoked subkeys.
* Add a test for sq encrypt for expired subkeys.
* Add a test for sq encrypt for non-encryption-capable certifications.
* Add a test for sq encrypt's certificate designators.
* Port sq_encrypt.rs to the common test framework.
* Move implementation, add NEWS entry.
* Move sq key userid strip to sq toolbox strip-userid.
* Make sq key expire more robust.
* Improve debugging output.
* Add a convenience function to preserve a test's state.
* Improve comments of revocation certificates.
* Wrap comment lines in revocation certificates.
* Align sq key subkey expire and sq key subkey revoke.
* Move the `sq key subkey` CLI parser to its own module.
* Move the `sq key revoke` CLI parser to its own module.
* Avoid using the system-wide crypto policy in tests.
* Implement sq --quiet.
* Remove debugging remnant.
* ci: remove pre-common-ci vestiges
* Thu Oct 17 2024 felix.niederwanger@suse.de
- Update to version 0.38.0:
* Release 0.38.0.
* Require exact --name and --email matches.
* Drop dependency itertools.
* Link to the new user documentation.
* Fix cleartext, message signing with --signer-cert.
* Improve wording.
* Update sequoia-keystore.
* Update sequoia-openpgp.
* Add a RSA2k cipher suite.
* Drop serde_json dependency.
* Thu Feb 29 2024 Felix Niederwanger <felix.niederwanger@suse.de>
- Disable cargo_audit for now
* Thu Feb 29 2024 Felix Niederwanger <felix.niederwanger@suse.de>
- Add comment for future legal reviews
* Mon Feb 26 2024 Jan Engelhardt <jengelh@inai.de>
- Ensure neutrality of descriptions.
* Thu Feb 22 2024 Felix Niederwanger <felix.niederwanger@suse.de>
- Add conflict with ispell-sq
* Thu Feb 22 2024 Felix Niederwanger <felix.niederwanger@suse.de>
- Add shell completions
* Tue Feb 20 2024 Felix Niederwanger <felix.niederwanger@suse.com>
- Add man pages and doc files
* Thu Feb 15 2024 felix.niederwanger@suse.de
- Use the sequoia-sq repository instead of the old sequoia with tags therein
- Add sqlite dependency
- Remove cargo_config
- Update to version 0.33.0:
* Release 0.33.0.
* Allow updating textwrap to 0.16.
* Bump all dependencies.
* Improve build and installation instructions.
* Update NEWS.
* Fix markup.
* Update h2 to fix RUSTSEC-2024-0003.
* Implement sq version, drop --version, move output-version there.
* Add sq toolbox, move the armor and packet subcommands there.
* Move sq import and export to sq cert.
* Thu Feb 15 2024 felix.niederwanger@suse.de
- Update to version 0.33.0:
* Release 0.33.0.
* Allow updating textwrap to 0.16.
* Bump all dependencies.
* Improve build and installation instructions.
* Update NEWS.
* Fix markup.
* Update h2 to fix RUSTSEC-2024-0003.
* Implement sq version, drop --version, move output-version there.
* Add sq toolbox, move the armor and packet subcommands there.
* Move sq import and export to sq cert.
* Thu Feb 08 2024 Felix Niederwanger <felix.niederwanger@suse.de>
- Disable update of vendored dependencies due to build errors
* Thu Feb 08 2024 Felix Niederwanger <felix.niederwanger@suse.de>
- Update licence (GPLv2-only)
* Wed Feb 07 2024 Felix Niederwanger <felix.niederwanger@suse.de>
- Update the service file:
* Change version schema to not include the git commit
* Remove unnecessary cargo audit
* Use obscpio as storage format
* Wed Feb 07 2024 felix.niederwanger@suse.de
- Update to version 0.28.0~git0.82eb0d7:
* sq: Release 0.28.0.
* sq: Fix usage generation.
* sq: Avoid deprecated chrono interfaces.
* sq: Update manpages.
* sq: Fix features.
* openpgp: Add streaming decryptor tests using passwords.
* openpgp: Fix salt generation in impl Arbitrary for S2K.
* openpgp: Enable test.
* openpgp: Fix documentation.
* openpgp: Don't check subpacket area length when parsing.
/usr/share/bash-completion/completions/sq.bash /usr/share/licenses/sequoia-sq-bash-completion /usr/share/licenses/sequoia-sq-bash-completion/LICENSE.txt
Generated by rpm2html 1.8.1
Fabrice Bellet, Tue Oct 13 22:27:26 2026