cfg/bin/vault-gpg
Knut Ahlers efc8bc4f3c
Throw shfmt against bash scripts
Signed-off-by: Knut Ahlers <knut@ahlers.me>
2018-03-10 12:47:55 +01:00

32 lines
766 B
Bash
Executable file

#!/bin/bash
KEY=$1
if [ -z "${KEY}" ] || ! (gpg2 --list-secret-keys ${KEY}); then
echo "No key given or no secret key found for '${KEY}'"
exit 2
fi
# Read password for this key
PWD=$(vault read --field=passphrase "/secret/gpg-key/${KEY}")
if [ -z "${PWD}" ]; then
echo "Could not read passphrase from vault."
exit 2
fi
HEXPWD=$(echo -n "${PWD}" | str2hex)
# Get keygrip of secret key
for KEYGRIP in $(gpg2 --with-keygrip -k ${KEY} | grep Keygrip | cut -d '=' -f 2 | xargs); do
# Set password for keygrip
if ! (gpg-connect-agent -q "PRESET_PASSPHRASE ${KEYGRIP} -1 ${HEXPWD}" /bye >/dev/null 2>&1); then
echo "An error occurred while caching password in GPG agent"
exit 1
fi
done
echo "Successfully cached password in GPG agent"
exit 0