finallycoffee/ansible-gpg-vault
finallycoffee/ansible-gpg-vault
5
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

add rough outline routine for reencryption of the vault

Browse Source
This commit is contained in:
Johanna Dorothea Reichmann 2019-08-03 18:07:11 +02:00
parent 60a414de9d
commit 50350b4bed
Signed by: transcaffeine
GPG Key ID: 03624C433676E465
1 changed files with 8 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
vault.sh
View File

@ -19,11 +19,17 @@ fi
case "$ACTION" in case "$ACTION" in
"decrypt") "decrypt")
gpg2 --batch --use-agent --decrypt $(dirname $0)/vault_passphrase.gpg 2>/dev/null gpg2 --batch --use-agent --decrypt $VAULT_PASS_FILE 2>/dev/null
;; ;;
"reencrypt") "reencrypt")
gpg2 --batch --use-agent --output $REPO_BASE_PATH/gpg/vault_passphrase --decrypt $VAULT_PASS_FILE
CMD="gpg2 --batch --use-agent --armor --output $VAULT_PASS_FILE"
for FINGERPRINT in $(cat KEY_FILE) do
CMD="$CMD --recipient $FINGERPRINT"
done
CMD="$CMD --encrypt $REPO_BASE_PATH/gpg/vault_passhphrase"
$($CMD)
;; ;;
"init") "init")