mirror of
https://github.com/5im-0n/sshenc.sh.git
synced 2025-08-02 11:20:05 +02:00
use symmetric encription
This commit is contained in:
34
sshencdec.sh
Normal file → Executable file
34
sshencdec.sh
Normal file → Executable file
@@ -23,6 +23,12 @@ $me home page: https://git.e.tern.al/s2/sshencdec
|
||||
EOF
|
||||
}
|
||||
|
||||
cleanup() {
|
||||
rm -f "$temp_file"
|
||||
rm -f "$temp_file_key"
|
||||
rm -f "$temp_file_key.enc"
|
||||
}
|
||||
|
||||
while getopts "h?p:s:" opt; do
|
||||
case "$opt" in
|
||||
h|\?)
|
||||
@@ -40,16 +46,32 @@ shift $((OPTIND-1))
|
||||
|
||||
[ "$1" = "--" ] && shift
|
||||
|
||||
temp_file="$(mktemp "${TMPDIR:-/tmp}/$(basename "$0").XXXXXX")"
|
||||
trap '{ rm -f "$temp_file"; }' EXIT
|
||||
temp_file="$(mktemp "${TMPDIR:-/tmp}/$(basename "$0").XXXXXX.enc")"
|
||||
temp_file_key="$(mktemp "${TMPDIR:-/tmp}/$(basename "$0").XXXXXX.key")"
|
||||
trap cleanup EXIT
|
||||
|
||||
#encrypt
|
||||
if [[ -e "$public_key" ]]; then
|
||||
if openssl rsautl -encrypt -pubin -inkey <(ssh-keygen -f "$public_key" -e -m PKCS8) -ssl > "$temp_file"; then
|
||||
echo "-- encrypted with https://git.e.tern.al/s2/sshencdec"
|
||||
openssl base64 < "$temp_file"
|
||||
openssl rand 32 > $temp_file_key
|
||||
|
||||
if openssl rsautl -encrypt -pubin -inkey <(ssh-keygen -f "$public_key" -e -m PKCS8) -in "$temp_file_key" -out "$temp_file_key.enc"; then
|
||||
if openssl enc -aes-256-cbc -salt -pass file:$temp_file_key > "$temp_file"; then
|
||||
echo "-- encrypted with https://git.e.tern.al/s2/sshencdec"
|
||||
echo "-- key"
|
||||
echo "$(openssl base64 -in "$temp_file_key.enc")"
|
||||
echo "-- /key"
|
||||
openssl base64 < "$temp_file"
|
||||
fi
|
||||
fi
|
||||
|
||||
#decrypt
|
||||
elif [[ -e "$private_key" ]]; then
|
||||
openssl base64 -d | openssl rsautl -decrypt -inkey $private_key
|
||||
stdin=`cat`
|
||||
key_enc=$(echo "$stdin" | awk '/-- key/{f=1;next} /-- \/key/{f=0} f')
|
||||
cypher=$(echo "$stdin" | sed -e '1,/-- \/key/d')
|
||||
echo "$key_enc" | openssl base64 -d | openssl rsautl -decrypt -ssl -inkey "$private_key" > "$temp_file"
|
||||
echo "$cypher" | openssl base64 -d | openssl aes-256-cbc -d -pass file:"$temp_file"
|
||||
|
||||
else
|
||||
show_help
|
||||
exit 1
|
||||
|
Reference in New Issue
Block a user