/
tpm
executable file
·117 lines (93 loc) · 2.34 KB
/
tpm
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
#!/bin/sh
# Copyright (C) 2013-2016 Sören Tempel
#
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program. If not, see <http://www.gnu.org/licenses/>.
umask 077
##
# Variables
##
GPG_OPTS="--quiet --yes --batch"
STORE_DIR="${PASSWORD_STORE_DIR:-${HOME}/.password-store}"
if [ -r "${STORE_DIR}/.gpg-id" ] && [ -z "${PASSWORD_STORE_KEY}" ]; then
read -r PASSWORD_STORE_KEY < "${STORE_DIR}/.gpg-id"
fi
##
# Helper
##
abort() {
printf '%s\n' "${1}" 1>&2
exit 1
}
gpg() {
if [ -n "${PASSWORD_STORE_KEY}" ]; then
gpg2 $GPG_OPTS --recipient "${PASSWORD_STORE_KEY}" "$@"
else
gpg2 $GPG_OPTS --default-recipient-self "$@"
fi
}
readpw() {
if [ -t 0 ]; then
printf "%s" "${1}"
stty -echo
fi
IFS= read -r "${2}"
[ -t 0 ] && stty echo
}
##
# Commands
##
show() {
entry_name="${1}"
entry_path="${STORE_DIR}/${entry_name}.gpg"
if [ -z "${entry_name}" ]; then
abort "USAGE: tpm show ENTRY"
fi
if [ ! -e "${entry_path}" ]; then
abort "The requested entry doesn't exist."
fi
gpg --decrypt "${entry_path}"
}
insert() {
entry_name="${1}"
entry_path="${STORE_DIR}/${entry_name}.gpg"
if [ -z "${entry_name}" ]; then
abort "USAGE: tpm insert ENTRY"
fi
if [ -e "${entry_path}" ]; then
abort "This entry already exists, please remove it first."
fi
password=""
readpw "Password for '${entry_name}': " password
if [ -t 0 ]; then
printf '\n'
fi
if [ -z "${password}" ]; then
abort "You didn't specify a password."
fi
mkdir -p "${entry_path%/*}"
printf '%s\n' "${password}" | gpg --encrypt \
--output "${entry_path}"
}
##
# Parse input
##
if [ $# -gt 2 ]; then
abort "tpm doesn't accept more than two arguments."
fi
case "${1}" in
"show") show "${2}" ;;
"insert") insert "${2}" ;;
*) abort "USAGE: tpm COMMAND ENTRY" ;;
esac
# vim: et:sw=2:sts=2