3 ### List the available recovery keys
5 ### (c) 2012 Mark Wooding
8 ###----- Licensing notice ---------------------------------------------------
10 ### This file is part of the distorted.org.uk key management suite.
12 ### distorted-keys is free software; you can redistribute it and/or modify
13 ### it under the terms of the GNU General Public License as published by
14 ### the Free Software Foundation; either version 2 of the License, or
15 ### (at your option) any later version.
17 ### distorted-keys is distributed in the hope that it will be useful,
18 ### but WITHOUT ANY WARRANTY; without even the implied warranty of
19 ### MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
20 ### GNU General Public License for more details.
22 ### You should have received a copy of the GNU General Public License
23 ### along with distorted-keys; if not, write to the Free Software Foundation,
24 ### Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
27 case "${KEYSLIB+t}" in t) ;; *) echo >&2 "$0: KEYSLIB unset"; exit 1 ;; esac
28 . "$KEYSLIB"/keyfunc.sh
32 List the available recovery keys, and the secrets they protect.
35 case $# in 0) ;; *) usage_err ;; esac
37 ## Work through the recovery keys.
38 if [ ! -d $KEYS/recov ]; then
39 echo 2>&1 "$quis: no recovery keys"
44 if [ ! -d $r ]; then continue; fi
46 ## Start printing a record for this key.
47 case $firstp in t) firstp=nil ;; nil) echo ;; esac
50 ## Print information about the configured keeper set.
53 read n hunoz <$KEYS/keeper/$k/meta
57 ## Print information about the various instances.
58 rcur=$(readlink $r/current)
61 ## Extract and check the instance number.
63 case "$i" in *[!0-9]*) continue ;; esac
65 ## Start printing a subrecord.
68 ## If this is the current instance, mention this.
69 case "$rcur" in $i) echo " current" ;; esac
71 ## Print basic facts about the instance.
73 nubid=$(cat $ri/store/nubid)
74 echo " profile $profile"
77 ## Print information about the keepers, including sharing stuff.
79 for kp in $ri/*.param; do
80 k=${kp##*/}; k=${k%.param}
81 read n hunoz <$KEYS/keeper/$k/meta
86 ## Print information about secrets protected by this recovery key
89 for sf in $(cd $ri; find . -type f -name '*.recov' -print); do
90 s=${sf#./}; s=${s%.recov}
91 case $anyp in nil) anyp=t; echo " secrets" ;; esac
98 ###----- That's all, folks --------------------------------------------------