1 files changed, 118 insertions, 0 deletions
diff --git a/password-store.sh b/password-store.sh
new file mode 100755
index 0000000..76ef226
--- /dev/null
+++ b/password-store.sh
@@ -0,0 +1,118 @@
+#!/bin/sh
+
+umask 077
+
+PREFIX="$HOME/.password-store"
+ID="$PREFIX/.gpg-id"
+
+usage() {
+	cat <<_EOF
+Password Store
+by Jason Donenfeld
+   Jason@zx2c4.com
+
+Usage:
+    $0 --init gpg-id
+        Initialize new password storage and use gpg-id for encryption.
+    $0 [--ls]
+        List passwords.
+    $0 pass-name
+        Show existing password.
+    $0 --insert [--multiline] pass-name
+        Insert new optionally multiline password.
+    $0 --generate [--no-symbols] pass-name pass-length
+        Generate a new password of pass-length with optionally no symbols.
+    $0 --remove pass-name
+        Remove existing password.
+    $0 --help
+        Show this text.
+_EOF
+}
+
+if [[ $1 == "--init" ]]; then
+	if [[ $# -ne 2 ]]; then
+		echo "Usage: $0 $1 gpg-id"
+		exit 1
+	fi
+	mkdir -v -p "$PREFIX"
+	echo "$2" > "$ID"
+	echo "Password store initialized for $2."
+	exit 0
+elif [[ $1 == "--help" ]]; then
+	usage
+fi
+
+if ! [[ -f $ID ]]; then
+	echo "You must run:"
+	echo "    $0 --init your-gpg-id"
+	echo "before you may use the password store."
+	echo
+	usage
+	exit 1
+else
+	ID="$(head -n 1 "$ID")"
+fi
+
+if [[ $# -eq 0 ]] || [[ $1 == "--ls" ]]; then
+	tree "$PREFIX" | tail -n +2 | head -n -2 | sed 's/\(.*\)\.gpg$/\1/';
+elif [[ $1 == "--insert" ]]; then
+	if [[ $# -lt 2 ]]; then
+		echo "Usage: $0 $1 [--multiline] pass-name"
+		exit 1
+	fi
+	ml=0
+	if [[ $2 == "--multiline" ]]; then
+		shift
+		ml=1
+	fi
+	mkdir -p -v "$PREFIX/$(dirname "$2")"
+
+	if [[ $ml -eq 0 ]]; then
+		echo -n "Enter password for $2: "
+		head -n 1 | gpg -e -r "$ID" > "$PREFIX/$2.gpg"
+	else
+		echo "Enter contents of $2 and press Ctrl+D when finished:"
+		echo
+		cat | gpg -e -r "$ID" > "$PREFIX/$2.gpg"
+	fi
+elif [[ $1 == "--generate" ]]; then
+	if [[ $# -lt 3 ]]; then
+		echo "Usage: $0 $1 [--no-symbols] pass-name pass-length"
+		exit 1
+	fi
+	symbols="-y"
+	if [[ $2 == "--no-symbols" ]]; then
+		symbols=""
+		shift
+	fi
+	if ! [[ $3 =~ ^[0-9]+$ ]]; then
+		echo "pass-length \"$3\" must be a number."
+		exit 1
+	fi
+	mkdir -p -v "$PREFIX/$(dirname "$2")"
+	pass="$(pwgen -s $symbols $3 1)"
+	echo $pass | gpg -e -r "$ID" > "$PREFIX/$2.gpg"
+	echo "The generated password to $2 is:"
+	echo "$pass"
+elif [[ $1 == "--remove" ]]; then
+	if [[ $# -ne 2 ]]; then
+		echo "Usage: $0 $1 pass-name"
+		exit
+	fi
+	passfile="$PREFIX/$2.gpg"
+	if ! [[ -f $passfile ]]; then
+		echo "$2 is not in the password store."
+		exit 1
+	fi
+	rm -i -v "$passfile"
+elif [[ $# -eq 1 ]]; then
+	passfile="$PREFIX/$1.gpg"
+	if ! [[ -f $passfile ]]; then
+		echo "$1 is not in the password store."
+		exit 1
+	fi
+	exec gpg -q -d "$passfile"
+else
+	usage
+	exit 1
+fi