chiark / gitweb /
keyfunc.sh.in, cryptop.info: Refactor property dumping.
[distorted-keys] / cryptop.archive
CommitLineData
0a155096
MW
1#! /bin/sh
2###
3### Output a publishable archive of the key repository
4###
5### (c) 2011 Mark Wooding
6###
7
8###----- Licensing notice ---------------------------------------------------
9###
10### This file is part of the distorted.org.uk key management suite.
11###
12### distorted-keys is free software; you can redistribute it and/or modify
13### it under the terms of the GNU General Public License as published by
14### the Free Software Foundation; either version 2 of the License, or
15### (at your option) any later version.
16###
17### distorted-keys is distributed in the hope that it will be useful,
18### but WITHOUT ANY WARRANTY; without even the implied warranty of
19### MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
20### GNU General Public License for more details.
21###
22### You should have received a copy of the GNU General Public License
23### along with distorted-keys; if not, write to the Free Software Foundation,
24### Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
25
26set -e
27case "${KEYSLIB+t}" in t) ;; *) echo >&2 "$0: KEYSLIB unset"; exit 1 ;; esac
28. "$KEYSLIB"/keyfunc.sh
29
30defhelp <<HELP
410343d6 31LABEL KEY | tar xf -
0a155096
MW
32Write a publishable archive of the key-management state.
33
410343d6
MW
34The archive is written to stdout as a tar archive containing two files:
35LABEL.tar.gz contains the actual archive, and LABEL.KEY.sig contains a
36signature.
0a155096
MW
37
38The archive doesn't contain any unecrypted secrets. You'll probably need
410343d6 39a keeper set to get anything useful out of it.
0a155096
MW
40HELP
41
42case $# in 2) ;; *) usage_err ;; esac
410343d6
MW
43arch=$1 key=$2
44checkword "archive label" "$arch"
0a155096
MW
45
46mktmp
47prepare "$key" archive
410343d6
MW
48cd $tmp
49mkdir $arch
50ln -s $ETC $arch/config
51mkdir $arch/data
52ln -s $KEYS/* $arch/data/
53rm -f $arch/data/nub
54tar cf - $arch/config/* $arch/data/*/* | gzip -9c >$arch.tar.gz
55c_sign $kdir $knub <$arch.tar.gz >$arch.sig
56tar cf - $arch.tar.gz $arch.sig
0a155096
MW
57
58###----- That's all, folks --------------------------------------------------