chiark / gitweb /
claim-dir, debian/distorted-keys.postinst: Let `keys' run `claim-dir'.
[distorted-keys] / keys.stash
CommitLineData
f0c3e6f6 1#! /bin/sh
599c8f75
MW
2###
3### Stash a recovery blob of a secret
4###
5### (c) 2011 Mark Wooding
6###
7
8###----- Licensing notice ---------------------------------------------------
9###
10### This file is part of the distorted.org.uk key management suite.
11###
12### distorted-keys is free software; you can redistribute it and/or modify
13### it under the terms of the GNU General Public License as published by
14### the Free Software Foundation; either version 2 of the License, or
15### (at your option) any later version.
16###
17### distorted-keys is distributed in the hope that it will be useful,
18### but WITHOUT ANY WARRANTY; without even the implied warranty of
19### MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
20### GNU General Public License for more details.
21###
22### You should have received a copy of the GNU General Public License
23### along with distorted-keys; if not, write to the Free Software Foundation,
24### Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
25
26set -e
27case "${KEYSLIB+t}" in t) ;; *) echo >&2 "$0: KEYSLIB unset"; exit 1 ;; esac
28. "$KEYSLIB"/keyfunc.sh
29
30defhelp <<HELP
d516ebd0 31RECOV LABEL
599c8f75
MW
32Store a secret encrypted under the recovery key RECOV.
33
34The LABEL is used to identify the encrypted secret later to the \`recover'
d516ebd0 35command. The secret is read from stdin.
599c8f75 36HELP
599c8f75
MW
37
38## Parse the command line.
d516ebd0 39case $# in 2) ;; *) usage_err ;; esac
599c8f75
MW
40recov=$1 label=$2; shift 2
41checkword "recovery key label" "$recov"
42checklabel "secret" "$label"
43
44## Do the thing.
c47f2aba 45mktmp
d516ebd0 46cat >$tmp/secret
c47f2aba 47stash $recov $label <$tmp/secret
599c8f75
MW
48
49###----- That's all, folks --------------------------------------------------