diff options
Diffstat (limited to 'src/password-store.sh')
| -rwxr-xr-x | src/password-store.sh | 242 |
1 files changed, 242 insertions, 0 deletions
diff --git a/src/password-store.sh b/src/password-store.sh new file mode 100755 index 0000000..2c6bd12 --- /dev/null +++ b/src/password-store.sh @@ -0,0 +1,242 @@ +#!/bin/bash + +umask 077 + +PREFIX="$HOME/.password-store" +ID="$PREFIX/.gpg-id" +GIT="$PREFIX/.git" + +export GIT_DIR="$GIT" +export GIT_WORK_TREE="$PREFIX" + +usage() { + cat <<_EOF +Password Store +by Jason Donenfeld + Jason@zx2c4.com + +Usage: + $program init gpg-id + Initialize new password storage and use gpg-id for encryption. + $program [ls] [subfolder] + List passwords. + $program [show] [--clip,-c] pass-name + Show existing password and optionally put it on the clipboard. + If put on the clipboard, it will be cleared in 45 seconds. + $program insert [--multiline,-m] pass-name + Insert new optionally multiline password. + $program generate [--no-symbols,-n] [--clip,-c] pass-name pass-length + Generate a new password of pass-length with optionally no symbols. + Optionally put it on the clipboard and clear board after 45 seconds. + $program rm pass-name + Remove existing password. + $program push + If the password store is a git repository, push the latest changes. + $program pull + If the password store is a git repository, pull the latest changes. + $program git git-command-args... + If the password store is a git repository, execute a git command + specified by git-command-args. + $program help + Show this text. +_EOF +} +isCommand() { + case "$1" in + init|ls|list|show|insert|generate|remove|rm|delete|push|pull|git|help) return 0 ;; + *) return 1 ;; + esac +} +clip() { + # This base64 business is a disgusting hack to deal with newline inconsistancies + # in shell. There must be a better way to deal with this, but because I'm a dolt, + # we're going with this for now. + + before="$(xclip -o -selection clipboard | base64)" + echo -n "$1" | xclip -selection clipboard + ( + sleep 45s + now="$(xclip -o -selection clipboard | base64)" + if [[ $now != $(echo -n "$1" | base64) ]]; then + before="$now" + fi + # It might be nice to programatically check to see if klipper exists, + # as well as checking for other common clipboard managers. But for now, + # this works fine. Clipboard managers frequently write their history + # out in plaintext, so we axe it here. + qdbus org.kde.klipper /klipper org.kde.klipper.klipper.clearClipboardHistory >/dev/null 2>&1 + echo "$before" | base64 -d | xclip -selection clipboard + ) & disown + echo "Copied $2 to clipboard. Will clear in 45 seconds." +} +program="$(basename "$0")" +command="$1" +if isCommand "$command"; then + shift +else + command="show" +fi + +case "$command" in + init) + if [[ $# -ne 1 ]]; then + echo "Usage: $program $command gpg-id" + exit 1 + fi + gpg_id="$1" + mkdir -v -p "$PREFIX" + echo "$gpg_id" > "$ID" + echo "Password store initialized for $gpg_id." + exit 0 + ;; + help) + usage + exit 0 + ;; +esac + +if ! [[ -f $ID ]]; then + echo "You must run:" + echo " $0 init your-gpg-id" + echo "before you may use the password store." + echo + usage + exit 1 +else + ID="$(head -n 1 "$ID")" +fi + +case "$command" in + show|ls|list) + clip=0 + if [[ $1 == "--clip" || $1 == "-c" ]]; then + clip=1 + shift + fi + path="$1" + if [[ -d $PREFIX/$path ]]; then + if [[ $path == "" ]]; then + echo "Password Store" + else + echo $path + fi + tree "$PREFIX/$path" | tail -n +2 | head -n -2 | sed 's/\(.*\)\.gpg$/\1/'; + else + passfile="$PREFIX/$path.gpg" + if ! [[ -f $passfile ]]; then + echo "$path is not in the password store." + exit 1 + fi + if [ $clip -eq 0 ]; then + exec gpg -q -d "$passfile" + else + clip $(gpg -q -d "$passfile") $path + fi + fi + ;; + insert) + ml=0 + if [[ $1 == "--multiline" || $1 == "-m" ]]; then + ml=1 + shift + fi + if [[ $# -ne 1 ]]; then + echo "Usage: $program $command [--multiline,-m] pass-name" + exit 1 + fi + path="$1" + mkdir -p -v "$PREFIX/$(dirname "$path")" + + passfile="$PREFIX/$path.gpg" + if [[ $ml -eq 0 ]]; then + echo -n "Enter password for $path: " + head -n 1 | gpg -e -r "$ID" > "$passfile" + else + echo "Enter contents of $path and press Ctrl+D when finished:" + echo + cat | gpg -e -r "$ID" > "$passfile" + fi + if [[ -d $GIT ]]; then + git add "$passfile" + git commit -m "Added given password for $path to store." + fi + ;; + generate) + clip=0 + symbols="-y" + while true; do + if [[ $1 == "--no-symbols" || $1 == "-n" ]]; then + symbols="" + shift + elif [[ $1 == "--clip" || $1 == "-c" ]]; then + clip=1 + shift + else + break + fi + done + if [[ $# -ne 2 ]]; then + echo "Usage: $program $command [--no-symbols,-n] [--clip,-c] pass-name pass-length" + exit 1 + fi + path="$1" + length="$2" + if ! [[ $length =~ ^[0-9]+$ ]]; then + echo "pass-length \"$length\" must be a number." + exit 1 + fi + mkdir -p -v "$PREFIX/$(dirname "$path")" + pass="$(pwgen -s $symbols $length 1)" + passfile="$PREFIX/$path.gpg" + echo $pass | gpg -e -r "$ID" > "$passfile" + if [[ -d $GIT ]]; then + git add "$passfile" + git commit -m "Added generated password for $path to store." + fi + + if [ $clip -eq 0 ]; then + echo "The generated password to $path is:" + echo "$pass" + else + clip "$pass" "$path" + fi + ;; + delete|rm|remove) + if [[ $# -ne 1 ]]; then + echo "Usage: $program $command pass-name" + exit + fi + path="$1" + passfile="$PREFIX/$path.gpg" + if ! [[ -f $passfile ]]; then + echo "$path is not in the password store." + exit 1 + fi + rm -i -v "$passfile" + if [[ -d $GIT ]] && ! [[ -f $passfile ]]; then + git rm -f "$passfile" + git commit -m "Removed $path from store." + fi + ;; + push|pull) + if [[ -d $GIT ]]; then + exec git $command $@ + else + echo "Error: the password store is not a git repository." + exit 1 + fi + ;; + git) + if [[ -d $GIT ]]; then + exec git $@ + else + echo "Error: the password store is not a git repository." + exit 1 + fi + ;; + *) + usage + exit 1 + ;; +esac +exit 0 |