[pkg-cryptsetup-devel] decrypt_openpgp new effort

[Christoph Anton Mitterer]

Hi list, David and Jonas.

Ok although my mathmatics study will start these days I've had some time
to look at my older decrypt scripts for OpenPGP.

Attached you'll find a first (not yet working) version and I'd be glad
if you'd find some time to look at it :)

decrypt_openpgp:
1) As last time I'd suggest this name rather than the alread existing
decrypt_gpg for known reasons.

2) This still needs the hack to move away /dev/tty (otherwise gpg
complains), see my notes about this issue from the last time.

3) The script as it is only works when the keyfile is already available.
I'd like to somehow combine this with passdev.
Is this possible? If so, what is the desired way? Any ideas for this?
Of course decrypt_openpgp should also work when the keyfile IS already
available, so it might be problematic to simply invoke passdev from
within the script.
This would also mean, that I'd need some machanism to automatically
include passdev in the initrd.

Any help would be apreciated.


gnupg:
1) As with last time I'd like to get rid of this. It would be nice if I
could specify some prereqs in the keyscripts.
Is there any progress here? Any decisions about the way to go?

As you can see it's probably not enough to simply copy-exec everything
that the keyscript returnt (e.g. when invoked with no parameter), as in
my case, the user might have different gpg's (gnupg and gnupg2)


Thanks,
Chris.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: decrypt_openpgp
Type: application/x-shellscript
Size: 2077 bytes
Desc: not available
Url : http://lists.alioth.debian.org/pipermail/pkg-cryptsetup-devel/attachments/20081010/883476d0/attachment.bin 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: gnupg
Type: application/x-shellscript
Size: 1449 bytes
Desc: not available
Url : http://lists.alioth.debian.org/pipermail/pkg-cryptsetup-devel/attachments/20081010/883476d0/attachment-0001.bin