1 b49d0f4b 2005-02-13 devnull #!/usr/local/plan9/bin/rc
4 b49d0f4b 2005-02-13 devnull name = secstore
5 b49d0f4b 2005-02-13 devnull get = secstoreget
6 b49d0f4b 2005-02-13 devnull put = secstoreput
9 b49d0f4b 2005-02-13 devnull flush = no
11 b49d0f4b 2005-02-13 devnull fn secstoreget{
12 b49d0f4b 2005-02-13 devnull secstore -i -g $1 <_password
15 b49d0f4b 2005-02-13 devnull fn secstoreput{
16 b49d0f4b 2005-02-13 devnull secstore -i -p $1 <_password
19 b49d0f4b 2005-02-13 devnull fn aesget{
20 b49d0f4b 2005-02-13 devnull if(! ~ $1 /*){
21 b49d0f4b 2005-02-13 devnull echo >[1=2] ipso: aescbc requires fully qualified pathname
22 b49d0f4b 2005-02-13 devnull exit usage
24 b49d0f4b 2005-02-13 devnull aescbc -i -d < $1 > `{basename $1} <[3] _password
27 b49d0f4b 2005-02-13 devnull fn aesput{
28 b49d0f4b 2005-02-13 devnull aescbc -i -e > $1 < `{basename $1} <[3] _password
31 b49d0f4b 2005-02-13 devnull fn editedfiles{
32 b49d0f4b 2005-02-13 devnull if(~ $get aesget){
33 b49d0f4b 2005-02-13 devnull for(i in $files)
34 b49d0f4b 2005-02-13 devnull if(ls -tr | sed '1,/^_timestamp$/d' | grep -s '^'^`{basename $i}^'$')
38 b49d0f4b 2005-02-13 devnull ls -tr | sed '1,/^_timestamp$/d'
41 b49d0f4b 2005-02-13 devnull while(~ $1 -*){
42 b49d0f4b 2005-02-13 devnull switch($1){
44 b49d0f4b 2005-02-13 devnull name = aescbc
45 b49d0f4b 2005-02-13 devnull get = aesget
46 b49d0f4b 2005-02-13 devnull put = aesput
48 b49d0f4b 2005-02-13 devnull flush = yes
50 b49d0f4b 2005-02-13 devnull edit = yes
52 b49d0f4b 2005-02-13 devnull load = yes
54 b49d0f4b 2005-02-13 devnull echo >[2=1] 'usage: ipso [-a -f -e -l] [-s] [file ...]'
55 b49d0f4b 2005-02-13 devnull exit usage
60 b49d0f4b 2005-02-13 devnull if(~ $flush no && ~ $edit no && ~ $load no){
61 b49d0f4b 2005-02-13 devnull load = yes
62 b49d0f4b 2005-02-13 devnull edit = yes
63 b49d0f4b 2005-02-13 devnull flush = yes
66 b49d0f4b 2005-02-13 devnull if(~ $flush yes && ~ $edit no && ~ $load no){
67 b49d0f4b 2005-02-13 devnull echo flushing old keys
68 8da6bca8 2005-02-14 devnull echo delkey | 9p write factotum/ctl
72 b49d0f4b 2005-02-13 devnull if(~ $get aesget && ~ $#* 0){
73 b49d0f4b 2005-02-13 devnull echo >[2=1] ipso: must specify a fully qualified file name for aescbc '(-a)'
74 b49d0f4b 2005-02-13 devnull exit usage
77 b49d0f4b 2005-02-13 devnull user=`{whoami}
78 b49d0f4b 2005-02-13 devnull cd /tmp || exit $status
79 b49d0f4b 2005-02-13 devnull tmp=`{df | awk '$1=="tmpfs" {print $NF}'}
80 b49d0f4b 2005-02-13 devnull if(! ~ $#tmp 0)
81 b49d0f4b 2005-02-13 devnull cd $tmp(1) || exit $status
82 b49d0f4b 2005-02-13 devnull mkdir -p ipso.$user
83 b49d0f4b 2005-02-13 devnull chmod 700 ipso.$user || exit $status
84 b49d0f4b 2005-02-13 devnull cd ipso.$user
85 b49d0f4b 2005-02-13 devnull dir=`{pwd}
86 b49d0f4b 2005-02-13 devnull dir=$"dir
88 b49d0f4b 2005-02-13 devnull fn sigexit {
89 b49d0f4b 2005-02-13 devnull rm -rf $dir
92 b49d0f4b 2005-02-13 devnull if ( ~ $edit yes ) echo '
93 b49d0f4b 2005-02-13 devnull Warning: The editor will display the secret contents of
94 b49d0f4b 2005-02-13 devnull your '$name' files in the clear, and they will
95 b49d0f4b 2005-02-13 devnull be stored temporarily in '^$dir^'
96 b49d0f4b 2005-02-13 devnull in the clear, along with your password.
99 b49d0f4b 2005-02-13 devnull # get password and remember it
100 b49d0f4b 2005-02-13 devnull readcons -s $name^' password' >_password
102 b49d0f4b 2005-02-13 devnull # get list of files
103 b49d0f4b 2005-02-13 devnull if(~ $#* 0){
104 b49d0f4b 2005-02-13 devnull if(! secstore -G . -i < _password > _listing){
105 b49d0f4b 2005-02-13 devnull echo 'secstore read failed - bad password?'
107 b49d0f4b 2005-02-13 devnull exit password
109 b49d0f4b 2005-02-13 devnull files=`{sed 's/[ ]+.*//' _listing}
112 b49d0f4b 2005-02-13 devnull files = $*
114 b49d0f4b 2005-02-13 devnull # copy the files to local ramfs
115 b49d0f4b 2005-02-13 devnull for(i in $files){
116 b49d0f4b 2005-02-13 devnull if(! $get $i){
117 b49d0f4b 2005-02-13 devnull echo $name ' read failed - bad password?'
119 b49d0f4b 2005-02-13 devnull exit password
122 b49d0f4b 2005-02-13 devnull sleep 2; date > _timestamp # so we can find which files have been edited.
124 b49d0f4b 2005-02-13 devnull # edit the files
125 817fe389 2005-02-13 devnull if(~ $edit yes){
126 817fe389 2005-02-13 devnull B `{for(i in $files) basename $i}
127 817fe389 2005-02-13 devnull readcons 'type enter when finished editing' >/dev/null
129 b49d0f4b 2005-02-13 devnull if(~ $flush yes ){
130 b49d0f4b 2005-02-13 devnull echo flushing old keys
131 b49d0f4b 2005-02-13 devnull echo delkey | 9p write factotum/ctl
133 b49d0f4b 2005-02-13 devnull if(~ $load yes){
134 b49d0f4b 2005-02-13 devnull echo loading factotum keys
135 b49d0f4b 2005-02-13 devnull if (~ factotum $files) cat factotum | 9p write -l factotum/ctl
138 b49d0f4b 2005-02-13 devnull # copy the files back
139 b49d0f4b 2005-02-13 devnull for(i in `{editedfiles}){
140 b49d0f4b 2005-02-13 devnull prompt='copy '''^`{basename $i}^''' back? [y/n/x]'
141 b49d0f4b 2005-02-13 devnull switch(`{readcons $prompt}){
142 b49d0f4b 2005-02-13 devnull case [yY]*
143 b49d0f4b 2005-02-13 devnull if(! $put $i){
144 b49d0f4b 2005-02-13 devnull echo $name ' read failed - bad password?'
146 b49d0f4b 2005-02-13 devnull exit password
148 b49d0f4b 2005-02-13 devnull echo ''''$i'''' copied to $name
149 8da6bca8 2005-02-14 devnull if(~ $i factotum && ! ~ $load yes){ # do not do it twice
150 8da6bca8 2005-02-14 devnull cat $i | 9p write -l factotum/ctl
152 b49d0f4b 2005-02-13 devnull case [xXqQ]*
154 b49d0f4b 2005-02-13 devnull case [nN]* *
155 b49d0f4b 2005-02-13 devnull echo ''''$i'''' skipped