m-chrzan.xyz
aboutsummaryrefslogtreecommitdiff
path: root/src/password-store.sh
AgeCommit message (Collapse)Author
2014-04-17move/copy: always reencrypt passwords at destinationJason A. Donenfeld
2014-04-17mv: Add pass mv/rename supportJason A. Donenfeld
Based-on-work-by: Matthieu Weber <mweber@free.fr> Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2014-04-16Better error messages.Jason A. Donenfeld
2014-04-16find: use heredoc for error messageJason A. Donenfeld
2014-04-15subcommand: do not parse -*Jason A. Donenfeld
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2014-04-15Bump versionJason A. Donenfeld
2014-04-15grep: add new pass grep commandJason A. Donenfeld
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2014-04-15Check for agent before batch processesJason A. Donenfeld
2014-04-15All globals are upper-case.Jason A. Donenfeld
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2014-04-15Reorganize entire programJason A. Donenfeld
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2014-04-15find: match without regards to caseJason A. Donenfeld
2014-04-15find: add find/search commandJason A. Donenfeld
This relies on a patched version of tree to work, unfortunately. Hopefully upstream will accept our patch. Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2014-04-12Use pipefail and randomize intermediate encrypted.Jason A. Donenfeld
Matthew writes: If the initial decrypt fails then the rest of the line shouldn't continue, as it won't be a properly decrypted password being re-encrypted and written over the existing passfile. One solution to this would be to enable pipefail (set -o pipefail) - either just before, or at the start of this script. This would cause the failure of any of the commands in a pipe to set the return status of the whole pipeline to non-zero (the last failed command's return code is used). We take his suggestion with this patch. While we're at it, we take a little bit extra care (though not too much extra care) to select a more random intermediate password, in case folks have a strange habit of using a dot-new extension on files. Suggested-by: Matthew Richardson <m.richardson@ed.ac.uk> Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2014-04-05Fix GPG spelling.Jason A. Donenfeld
2014-03-23Use heredoc for unset error.Jason A. Donenfeld
Suggested-by: Tom Vincent <pass@tlvince.com>
2014-03-23umask: allow overridableJason A. Donenfeld
Suggested-by: Matthew Richardson <m.richardson@ed.ac.uk>
2014-03-23Heredoc refresh.Jason A. Donenfeld
2014-03-23clip: wait longer for slow systemsJason A. Donenfeld
2014-03-22gpg: allow the use of gpg1 with or without agentJason A. Donenfeld
Suggested-by: Matthieu Weber <mweber@free.fr>
2014-03-22clip: rename SELECTION to X_SELECTIONJason A. Donenfeld
2014-03-22Version bump ahead of release.Jason A. Donenfeld
2014-03-22clip: suppress kill errorJason A. Donenfeld
2014-03-22clip: use pkill instead of procJason A. Donenfeld
2014-03-20Prefer bash parameter expansion over basename(1)Tom Vincent
2014-03-20Fix argument order for mktempjbeta
mktemp expects all options before a template. This prevented the temporary file for "pass edit" mode from being created in /dev/shm.
2014-03-20Configurable clipboard time.Jason A. Donenfeld
2014-03-20Allow selection to be overriden by $SELECTIONJason A. Donenfeld
Some users want to use a different clipboard for pass. Suggested-by: nand <nand@nand.wakku.to>
2014-03-20git: sign commits if enabledJason A. Donenfeld
2014-03-20clip: don't race between pass instances in restoreJason A. Donenfeld
We now make sure a previous pass clip restore finishes immediately when copying another password to the clipboard. This is currently only implemented on Linux.
2014-03-20Style.Jason A. Donenfeld
2014-03-19Simplify exports.Jason A. Donenfeld
2014-03-19Copyright noticeJason A. Donenfeld
2014-03-19Team pass: enable multiple keys and per directoryJason A. Donenfeld
The .gpg-id file may now have multiple keys in it, one per line. If a .gpg-id file exists inside a subdirectory, passwords inside that directory are encrypted to that/those ids. The init command has learned a -p/--path option for writing such a sub directory .gpg-id and now can take several arguments for ids.
2014-03-18Shred shm files.Jason A. Donenfeld
2014-03-18Do not compress passwords.Jason A. Donenfeld
According to a forthcoming paper by Alfredo Pironti, OpenPGP compression can reveal entropy levels. We thus disable compression. Existing password stores can be reencrypted without compression using the "--reencrypt" flag for "init". Reported-by: Alfredo Pironti <alfredo.pironti@inria.fr> Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2013-09-14Use a glob in the pattern match instead of using two comparisons for [yY].Chris Down
2013-09-14Rephrase awkward/confusing message about enabling echo during password entry.Chris Down
2013-09-14Fix directory traversal for reencryption when $PREFIX is a symlinkBrian Shore
2013-05-22check if a passfile exists before checking for directoryBrian Mattern
2013-04-04Simplify sed to not use replacement.Jason A. Donenfeld
2013-02-23Tree should follow symlinks.Marvin Killing
Make show/ls/list follow links by passing -l to tree.
2012-10-18Bump version.Jason A. Donenfeld
2012-10-17Do not interpret backslashes when reading passwordsguns
The `read` builtin accepts backslash notation for common non-printing characters by default, like `\t` and `\n`. This requires that any literal backslashes must also be escaped as `\\`. Given that `gpg -e` does not interpret input, the `read` invocations are changed to do the same. Also, the right hand side of an `==` comparison within `[[ ]]` must be quoted in order to suppress pattern metacharacter expansion. Quoting the bash manual: When the == and != operators are used, the string to the right of the operator is considered a pattern and matched according to the rules described below under Pattern Matching.
2012-10-09Restore exclusivity of options in multiline/echo check.Jason A. Donenfeld
2012-10-05Trim trailing slash in tree display.Jason A. Donenfeld
2012-10-03Make --no-echo default, and rename to --echo.Jason A. Donenfeld
Reported-by: Paul Wise <pabs@debian.org>
2012-09-30Check error code of gpg before copying to clipboard.Jason A. Donenfeld
2012-09-30Explicitly use gpg2 rather than relying on symlink.Jason A. Donenfeld
2012-09-24Style fixes.Jason A. Donenfeld
2012-09-22Normalize negation and bashism.Jason A. Donenfeld