This is definitely not military quality – but if you need a simple way to manage a GPG-encrypted file containing info you want to protect this works pretty well for me. I use this to manage a set of passwords on a trusted machine that I can ssh to.<\/p>\n
It assumes you’re using a bash-like shell and have a trusted private key available in the account you’re running it on.<\/p>\n
\r\n\r\n#!\/bin\/bash\r\n\r\nKEYS=""\r\n\r\nif [ ! -e "$HOME\/private" ]\r\nthen\r\n mkdir -m 700 "$HOME\/private"\r\n umask 77 "$HOME\/private\/"\r\nfi\r\n\r\n# Always delete the unencrypted file at the end of the session. We DO NOT want this hanging around.\r\ntrap "rm -f \\"$HOME\/private\/${USER}_private_store.txt\\"; chmod 600 \\"$HOME\/private\/${USER}_private_store.txt\\"*; exit" INT TERM EXIT\r\n\r\ntouch "$HOME\/private\/${USER}_private_store.txt"\r\nchmod 600 "$HOME\/private\/${USER}_private_store.txt"\r\n\r\ngpg --decrypt "$HOME\/private\/${USER}_private_store.txt.asc" > "$HOME\/private\/${USER}_private_store.txt"\r\nvim "$HOME\/private\/${USER}_private_store.txt"\r\n\r\nmd5sum "$HOME\/private\/${USER}_private_store.txt.md5sum.new"\r\n\r\nif [ -e "$HOME\/private\/${USER}_private_store.txt.md5sum" ]\r\nthen\r\n if [ "`cmp "$HOME\/private\/${USER}_private_store.txt.md5sum.new" "$HOME\/private\/${USER}_private_store.txt.md5sum"`" == "" ]\r\n then\r\n clear\r\n rm -f "$HOME\/private\/${USER}_private_store.txt.md5sum.new"\r\n echo 'No changes, not re-encrypting'\r\n exit\r\n fi\r\nfi\r\n\r\nmv "$HOME\/private\/${USER}_private_store.txt.md5sum.new" "$HOME\/private\/${USER}_private_store.txt.md5sum"\r\n\r\necho 'File has changed. Re-encrypting. . .'\r\ngpg -a --encrypt -r $KEYS "$HOME\/private\/${USER}_private_store.txt"\r\nclear\r\n\r\n<\/pre>\nFirst time it runs it’ll create a private directory, start vim, and encrypt the text you enter into vim. On subsequent runs it’ll prompt you for your private key passphrase and repeat the cycle. It won’t re-encrypt if there haven’t been any changes.<\/p>\n
I’m betting wordpress messes up the code, so here’s the text file: edit_password_safe.sh<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"This is definitely not military quality – but if you need a simple way to manage a GPG-encrypted file containing info you want to protect this works pretty well for me. I use this to manage a set of passwords … Continue reading