Add zpass
This commit is contained in:
zawz
parent
f8c7032ad9
commit
3c26c11981
1 changed files with 340 additions and 0 deletions
340
zpass/zpass
Executable file
340
zpass/zpass
Executable file
|
|
@ -0,0 +1,340 @@
|
|||
#!/bin/sh
|
||||
|
||||
fname=$(basename "$0")
|
||||
usage()
|
||||
{
|
||||
echo "$fname <operation>
|
||||
[Global Operations]:
|
||||
list-files List eligible files in data path. Shortcut 'lsf'
|
||||
cache-clear Delete all cached keys. Shortcut 'cc'
|
||||
help Display help
|
||||
[File Operations]:
|
||||
ls [path] List contents at given path
|
||||
tree List all contents
|
||||
create Create a file or change key
|
||||
get <path> Get the value of target
|
||||
copy <path> Copy the target value to clipboard. Shortcut 'x'
|
||||
set <path> <value> Set the value of target
|
||||
new <path> [length] Generate a random password at target
|
||||
rm <path> Delete the target
|
||||
|
||||
[Config]:
|
||||
*Variable* *Default value* *Description*
|
||||
----------------------------------------------------------------------------
|
||||
CONFIGFILE '\$XDG_CONFIG_HOME/zpass/defaut.conf' Path to the config file to load
|
||||
ZPASS_PATH '\$XDG_DATA_HOME/zpass' Folder containing password files
|
||||
ZPASS_CACHE_PATH '\$XDG_CACHE_HOME/zpass' Path used for caching keys
|
||||
ZPASS_FILE 'default' File to use for operations
|
||||
ZPASS_KEY Key to use for encrypting/decrypting files
|
||||
ZPASS_KEY_CACHE_TIME '1' Time a key stays in cache for decrypting, in minutes
|
||||
ZPASS_CLIPBOARD_TIME '30' Time until clipboard gets cleared after copy, in seconds
|
||||
ZPASS_UNK_OP_CALL 'copy' Operation to call on unrecognized first argument
|
||||
|
||||
All operations can be shortened to their first char unless specified
|
||||
Unknown operations will perform the operation described in `ZPASS_UNK_OP_CALL`
|
||||
"
|
||||
}
|
||||
|
||||
# XDG config
|
||||
datapath="$HOME/.local/share/zpass"
|
||||
cachepath="$HOME/.cache/zpass"
|
||||
configpath="$HOME/.config/zpass"
|
||||
[ -n "$XDG_DATA_HOME" ] && datapath="$XDG_DATA_HOME/zpass"
|
||||
[ -n "$XDG_CONFIG_HOME" ] && configpath="$XDG_CONFIG_HOME/zpass"
|
||||
[ -n "$XDG_CACHE_HOME" ] && cachepath="$XDG_CACHE_HOME/zpass"
|
||||
[ -z "$CONFIGFILE" ] && CONFIGFILE="$configpath/default.conf"
|
||||
|
||||
# load config file
|
||||
[ -f "$CONFIGFILE" ] && { . "$CONFIGFILE" || exit $? ; }
|
||||
|
||||
# resolve zpass_path
|
||||
[ -n "$ZPASS_PATH" ] && datapath="$ZPASS_PATH"
|
||||
|
||||
# default ZPASS config
|
||||
[ -z "$ZPASS_FILE" ] && ZPASS_FILE=default
|
||||
[ -z "$ZPASS_EXTENSION" ] && ZPASS_EXTENSION=.tar.gpg
|
||||
[ -z "$ZPASS_KEY_CACHE_TIME" ] && ZPASS_KEY_CACHE_TIME=1 # in minutes
|
||||
[ -z "$ZPASS_CLIPBOARD_TIME" ] && ZPASS_CLIPBOARD_TIME=30 # in seconds
|
||||
[ -z "$ZPASS_UNK_OP_CALL" ] && ZPASS_UNK_OP_CALL="copy"
|
||||
|
||||
file="$datapath/$ZPASS_FILE$ZPASS_EXTENSION"
|
||||
|
||||
mkdir -p "$datapath" 2>/dev/null || error 1 "Could not create '$datapath'"
|
||||
mkdir -p "$cachepath" 2>/dev/null && chmod -R go-rwx "$cachepath" 2>/dev/null
|
||||
|
||||
escape_chars() {
|
||||
echo "$*" | sed 's|\.|\\\.|g;s|/|\\/|g'
|
||||
}
|
||||
|
||||
error(){
|
||||
ret=$1 && shift 1 && echo $* >&2 && exit $ret
|
||||
}
|
||||
|
||||
randalnum() {
|
||||
tr -cd '[a-zA-Z]' < /dev/urandom | head -c $1
|
||||
}
|
||||
|
||||
randpass() {
|
||||
len=$1
|
||||
[ -z "$len" ] && len=20
|
||||
tr -cd 'a-zA-Z0-9!-.' < /dev/urandom | head -c $len
|
||||
}
|
||||
|
||||
keyfile(){
|
||||
printf "%s.key" "$(echo "$file" | md5sum | cut -d' ' -f1)"
|
||||
}
|
||||
|
||||
# $1 = delay in sec
|
||||
clipboard_clear() {
|
||||
if [ -n "$1" ]
|
||||
then
|
||||
for I in $(screen -ls | grep "zpass_clipboard" | awk '{print $1}')
|
||||
do
|
||||
screen -S "$I" -X stuff "^C"
|
||||
done
|
||||
screen -dmS "zpass_clipboard" sh -c "sleep $1 ; xclip -selection clipboard < /dev/null" # call zpass for autoclean
|
||||
else
|
||||
xclip -selection clipboard < /dev/null
|
||||
fi
|
||||
}
|
||||
|
||||
# $1 = delay in min
|
||||
delete_cache() {
|
||||
if [ "$1" -gt 0 ] 2>/dev/null
|
||||
then
|
||||
for I in $(screen -ls | grep "zpass_$(keyfile)" | awk '{print $1}')
|
||||
do
|
||||
screen -S "$I" -X stuff "^C"
|
||||
done
|
||||
screen -dmS "zpass_$(keyfile)" sh -c "sleep $(($1*60)) ; $0" # call zpass for autoclean
|
||||
else
|
||||
rm -f "$cachepath/$(keyfile)" 2>/dev/null
|
||||
fi
|
||||
}
|
||||
|
||||
clean_cache() {
|
||||
# key cache
|
||||
find "$cachepath" -type f -mmin +"$ZPASS_KEY_CACHE_TIME" -exec rm '{}' ';'
|
||||
# tmp folders older than 1 min
|
||||
rm -rd $(find /tmp -maxdepth 1 -type d -name "zpass_*" ! -mmin 1)
|
||||
}
|
||||
|
||||
clear_cache() {
|
||||
rm "$cachepath/*"
|
||||
}
|
||||
|
||||
write_cache() {
|
||||
echo "$1" > "$cachepath/$(keyfile)"
|
||||
delete_cache $ZPASS_KEY_CACHE_TIME
|
||||
}
|
||||
|
||||
get_key_cached() {
|
||||
cat "$cachepath/$(keyfile)" 2>/dev/null
|
||||
}
|
||||
|
||||
# $1 = prompt message
|
||||
prompt_password() {
|
||||
if [ -n "$DISPLAY" ]
|
||||
then
|
||||
if which kdialog >/dev/null 2>&2
|
||||
then kdialog --title "zpass" --password "$1" 2>/dev/null
|
||||
else zenity --title "zpass" --password 2>/dev/null
|
||||
fi
|
||||
else
|
||||
printf "%s:" "$1" >&2
|
||||
stty -echo
|
||||
read -r PASSWORD || return $?
|
||||
stty echo
|
||||
printf "\n" >&2
|
||||
echo $PASSWORD
|
||||
fi
|
||||
}
|
||||
|
||||
# $1 = message
|
||||
error_dialog() {
|
||||
if which kdialog >/dev/null 2>&2
|
||||
then kdialog --title "zpass" --error "$1" 2>/dev/null
|
||||
else zenity --title "zpass" --error --text="$1" 2>/dev/null
|
||||
fi
|
||||
}
|
||||
|
||||
new_key_with_confirm()
|
||||
{
|
||||
[ -n "$ZPASS_KEY" ] && echo "$ZPASS_KEY" && return 0
|
||||
pass1=1
|
||||
pass2=2
|
||||
while [ "$pass1" != "$pass2" ]
|
||||
do
|
||||
pass1=$(prompt_password "Enter new key") || error 100 "Cancelled"
|
||||
pass2=$(prompt_password "Confirm key") || error 100 "Cancelled"
|
||||
[ "$pass1" != "$pass2" ] && error_dialog "Passwords do not match.\nTry again"
|
||||
done
|
||||
write_cache "$pass1" &
|
||||
echo "$pass1"
|
||||
}
|
||||
|
||||
# $1 = prompt message
|
||||
get_key() {
|
||||
message="Enter key"
|
||||
[ -n "$1" ] && message="$1"
|
||||
key=$(prompt_password "$message") || return $?
|
||||
write_cache "$key" &
|
||||
echo "$key"
|
||||
}
|
||||
|
||||
# $1 = key , $2 = keyfile to write
|
||||
decrypt_with_key()
|
||||
{
|
||||
gpg --pinentry-mode loopback --batch --passphrase "$1" -o - -d "$file" 2>/dev/null && ret=$? && [ -n "$2" ] && echo "$1" > "$2"
|
||||
return $ret
|
||||
}
|
||||
|
||||
# $1 = keyfile to write
|
||||
decrypt()
|
||||
{
|
||||
[ ! -f "$file" ] && return 1 # no file
|
||||
|
||||
if [ -n "$ZPASS_KEY" ]
|
||||
then # key given already
|
||||
decrypt_with_key "$ZPASS_KEY" "$1" ; ret=$?
|
||||
else # prompt for key
|
||||
# attempt decrypt from cache
|
||||
key=$(get_key_cached) && decrypt_with_key "$key" "$1"
|
||||
ret=$?
|
||||
if [ $ret -ne 0 ]
|
||||
then
|
||||
# cache was incorrect: delete
|
||||
delete_cache >/dev/null 2>&1
|
||||
# try loop
|
||||
tries=0
|
||||
while [ $ret -ne 0 ] && [ $tries -lt 3 ]
|
||||
do
|
||||
key=$(get_key) || { echo "Cancelled" >&2 && return 100 ; }
|
||||
tries=$((tries+1))
|
||||
decrypt_with_key "$key" "$1" ; ret=$?
|
||||
done
|
||||
fi
|
||||
fi
|
||||
[ $ret -ne 0 ] && { echo "Could not decrypt '$file'" >&2 && return $ret ; }
|
||||
}
|
||||
|
||||
# $1 = key
|
||||
encrypt() {
|
||||
gpg --pinentry-mode loopback --batch --passphrase "$1" -o - -c -
|
||||
}
|
||||
|
||||
# $1 = tmpdir , $2 = keyfile
|
||||
unpack(){
|
||||
rm -rf "$1" || return $?
|
||||
mkdir -p "$1" || return $?
|
||||
(
|
||||
cd "$1"
|
||||
{ decrypt "$2" || return $?; } | tar -xf - 2>/dev/null || return $?
|
||||
)
|
||||
}
|
||||
|
||||
# $1 = tmpdir , $2 = keyfile
|
||||
pack()
|
||||
{
|
||||
# clean empty dirs
|
||||
archive="archive_$(randalnum 5)"
|
||||
find "$1" -empty -type d -delete
|
||||
(
|
||||
cd "$1"
|
||||
if [ -n "$2" ]
|
||||
then
|
||||
key=$(cat "$2") && rm "$2" || return $?
|
||||
else
|
||||
key=$(new_key_with_confirm) || return $?
|
||||
fi
|
||||
tar -cf - * | encrypt "$key" > "$1/$archive" || return $?
|
||||
) || return $?
|
||||
mv -f "$1/$archive" "$file"
|
||||
}
|
||||
|
||||
# $1 = file , $2 = content
|
||||
setval()
|
||||
{
|
||||
# tmp files
|
||||
tmpdir="/tmp/zpass_$(randalnum 5)"
|
||||
keyfile="$tmpdir/$(randalnum 5).key"
|
||||
# operation
|
||||
unpack "$tmpdir" "$keyfile" || return $?
|
||||
[ -n $(dirname "$1") ] && mkdir -p "$tmpdir/$(dirname "$1")" 2>/dev/null # create dir
|
||||
echo "$2" > "$tmpdir/$1" || return $? # set target data
|
||||
pack "$tmpdir" "$keyfile" || return $?
|
||||
rm -rf "$tmpdir"
|
||||
}
|
||||
|
||||
remove()
|
||||
{
|
||||
# tmp files
|
||||
tmpdir="/tmp/zpass_$(randalnum 5)"
|
||||
keyfile="$tmpdir/$(randalnum 5).key"
|
||||
# operation
|
||||
unpack "$tmpdir" "$keyfile" || return $?
|
||||
rm "$tmpdir/$1" # delete target
|
||||
pack "$tmpdir" "$keyfile" || return $?
|
||||
rm -rf "$tmpdir"
|
||||
}
|
||||
|
||||
create() {
|
||||
if [ -f "$file" ]
|
||||
then
|
||||
tmpdir="/tmp/zpass_$(randalnum 5)"
|
||||
# pack n repack with no tmp key: create new
|
||||
unpack "$tmpdir" || return $?
|
||||
pack "$tmpdir" || return $?
|
||||
rm -rf "$tmpdir"
|
||||
else
|
||||
[ -z "$ZPASS_KEY" ] && ZPASS_KEY=$(new_key_with_confirm) || { echo "Cancelled" >&2 && return 100 ; }
|
||||
tar -cf - -T /dev/null | encrypt "$ZPASS_KEY" 2>/dev/null > "$file" || { echo "Encryption error" >&2 && return 1 ; }
|
||||
fi
|
||||
}
|
||||
|
||||
list()
|
||||
{
|
||||
tree=$(decrypt | tar -tf - 2>/dev/null) || return $?
|
||||
ret="$tree"
|
||||
if [ -n "$1" ]
|
||||
then
|
||||
# file
|
||||
ret=$(echo "$tree" | sed -n "/\/$/d;/^$(escape_chars "$1")\$/p")
|
||||
# folder
|
||||
[ -z "$ret" ] && in=$(echo "$1/" | tr -s '/') && ret=$(echo "$tree" | grep "^$in" | sed "s|^$in||g")
|
||||
fi
|
||||
echo "$ret" | sed "/\/..*/d;/^\$/d"
|
||||
}
|
||||
|
||||
tree()
|
||||
{
|
||||
tree=$(decrypt | tar -tf - 2>/dev/null) || return $?
|
||||
echo "$tree" | sed '/\/$/d;/^$/d'
|
||||
}
|
||||
|
||||
get(){
|
||||
{ decrypt || return $?; } | tar -xOf - "$1" 2>/dev/null
|
||||
}
|
||||
|
||||
copy()
|
||||
{
|
||||
{ get "$1" || return $?; } | tr -d '\n' | xclip -selection clipboard && clipboard_clear "$ZPASS_CLIPBOARD_TIME"
|
||||
}
|
||||
|
||||
clean_cache 2>/dev/null
|
||||
[ -z "$1" ] && usage && return 1
|
||||
|
||||
case $1 in
|
||||
lsf|list-files) ls "$datapath" 2>/dev/null | grep "$ZPASS_EXTENSION\$" | sed "s/$(escape_chars "$ZPASS_EXTENSION")\$//g" ;;
|
||||
cc|cache-clear) clear_cache 2>/dev/null ;;
|
||||
l|ls|list) list $2 ;;
|
||||
t|tree) tree ;;
|
||||
c|create) create ;;
|
||||
g|get) get "$2" ;;
|
||||
s|set) setval "$2" "$3" ;;
|
||||
n|new) setval "$2" "$(randpass $3)" ;;
|
||||
r|rm) remove "$2" "$3" ;;
|
||||
x|copy|clipboard) copy "$2" ;;
|
||||
h|help) usage ;;
|
||||
*) "$0" $ZPASS_UNK_OP_CALL "$@" ;;
|
||||
esac
|
||||
Loading…
Reference in a new issue