GPG mit zenity Gui

lockdoc · 1 Oktober 2013

Hi,
ich hab mir mal eine GPG Encrypt Gui mit zenity gebaut, was man wunderbar an thunar oder nautilus als custom action ranpacken kann. Wer mag kann ja mal sein Senf dazu geben, oder das noch etwas aufbohren, da ich noch recht frisch mit scripting bin.

LG

Code:

#!/bin/sh
#
#
# Required Software:
# -------------------------
#  * gpg
#    * zenity
#
#
# Thunar Integration
# ------------------------
#
#  Command:      ~/bin/thunar-gpg-encrypt.sh -f %f
#  File Pattern: *
#  Appear On:    Select everything
#
#
# Usage:
# -------------------------
#  thunar-gpg-encrypt.sh -f <filename>
#
#    required:
#      -f    input filename
#



usage() {
    echo "$0 -f <filename>"
    echo
    echo " required:"
    echo "  -f    input filename"
    echo
    exit 1
}


while getopts ":f:" i; do
    case "${i}" in
        f)
            f=${OPTARG}
            ;;
        *)
            echo "Error - unrecognized option $1" 1>&2;
            usage
            ;;
    esac
done
shift $((OPTIND-1))

# Check if file is specified
if [ -z "${f}" ]; then
    echo "Error - no file specified" 1>&2;
    usage
fi


Recipient () {

    pubkeys=`gpg --list-public-keys \
      | grep -A 1 pub \
      | awk '{print $2,$3,$4}' \
      | egrep -v "^[[:space:]]*$" \
      | awk 'NR%2{printf $1" ";next;}1' \
      | awk '{print substr($0,7,8)" "substr($0,1,5)" \""$2,$3,$4"\""}'`


    CMD="zenity --list \
          --width=550 --height=250 \
          --title=\"GPG Encrypt File for...\" \
          --print-column=1 \
          --text=\"Choose Recipient\" \
          --column=\"Key\" --column=\"Bit\" --column=\"Recipient\" $pubkeys"

    eval $CMD
}


Secret () {

    seckeys=`gpg --list-secret-keys \
      | grep -A 1 sec \
      | awk '{print $2,$3,$4}' \
      | egrep -v "^[[:space:]]*$" \
      | awk 'NR%2{printf $1" ";next;}1' \
      | awk '{print substr($0,7,8)" "substr($0,1,5)" \""$2,$3,$4"\""}'`


    CMD="zenity --list \
          --width=550 --height=250 \
          --title=\"Choose private key...\" \
          --print-column=1 \
          --text=\"Choose your private key\" \
          --column=\"Key\" --column=\"Bit\" --column=\"Secret Key\" $seckeys"

    eval $CMD
}


Passphrase () {

    CMD="zenity --password"
    eval $CMD
}


r=`Recipient`
if [ -z "${r}" ]; then
    zenity --error --text="No Recipient specified."
    exit 1
fi
# fix zenity bug on double click
# https://bugzilla.gnome.org/show_bug.cgi?id=698683
r=`echo $r | awk '{split($0,a,"|"); print a[1]}'`



u=`Secret`
if [ -z "${u}" ]; then
    zenity --error --text="No Secret key specified."
    exit 1
fi
# fix zenity bug on double click
# https://bugzilla.gnome.org/show_bug.cgi?id=698683
u=`echo $u | awk '{split($0,a,"|"); print a[1]}'`



p=`Passphrase`
if [ -z "${p}" ]; then
    zenity --error --text="No Password specified."
    exit 1
fi

error=$(gpg -e -s --yes --batch --local-user $u --recipient $r --passphrase $p "${f}" 2>&1)
errno=$?

if [ "$errno" -gt "0" ]; then
    zenity --error --text="${error}\nreturn code: ${errno}"
    exit 1
else
    zenity --info --text="Encrypted."
    exit 0
fi

Rakor · 2 Oktober 2013

Ich habe keine große Ahnung, aber ich würde für die Passworteingabe eher zu pinentry greifen, da es extra auf sicheres Passworthandling ausgelegt ist. Ich weiss nicht wie "sicher" zenity da ist.

lockdoc · 2 Oktober 2013

Ich hab jetzt mal versucht das zu googlen, aber nirgends eine Anweisung gefunden, wie man pinentry nutzt.
Hast du damit schon gearbeitet? Falls ja, wie nutzte ich es denn fuer die Passworteingabe?

Rakor · 2 Oktober 2013

Nein habe ich noch nicht genutzt, sorry. Ich bin nur irgendwo mal über ne Doku gestolpert in der stand man solle zum Einlesen von Passworten pinentry nutzen, da es sich angeblich um sicheren Speicher kümmert. Is aber auch schon wieder ne Weile her.

lockdoc · 12 Oktober 2013

So ich habs mal angepasst, dass jetzt pinentry genutzt wird

Code:

#!/bin/sh
#
# List available public recipient keys, encrypt the file
# for the specified recipient by his/her public key and sign it
# with your own key.
#
# * Put this file into your home binary dir: ~/bin/
# * Make it executable: chmod +x
#
#
# Required Software:
# -------------------------
#    * gpg
#    * zenity
#    * pinentry-gtk-2
#
#
# Thunar Integration
# ------------------------
#
#  Command:      ~/bin/thunar-gpg-encrypt.sh -f %f
#  File Pattern: *
#  Appear On:    Select everything
#
#
# Usage:
# -------------------------
#  thunar-gpg-encrypt.sh -f <filename>
#
#    required:
#      -f    input filename
#


usage() {
    echo "$0 -f <filename>"
    echo
    echo " required:"
    echo "  -f    input filename"
    echo
    exit 1
}


while getopts ":f:" i; do
    case "${i}" in
        f)
            f=${OPTARG}
            ;;
        *)
            echo "Error - unrecognized option $1" 1>&2;
            usage
            ;;
    esac
done
shift $((OPTIND-1))

# Check if file is specified
if [ -z "${f}" ]; then
    echo "Error - no file specified" 1>&2;
    usage
fi


chooseRecipient () {

    pubkeys=`gpg --list-public-keys \
      | grep -A 1 pub \
      | awk '{print $2,$3,$4}' \
      | egrep -v "^[[:space:]]*$" \
      | awk 'NR%2{printf $1" ";next;}1' \
      | awk '{print substr($0,7,8)" "substr($0,1,5)" \""$2,$3,$4"\""}'`


    CMD="zenity --list \
          --width=550 --height=250 \
          --title=\"GPG Encrypt File for...\" \
          --print-column=1 \
          --text=\"Choose Recipient\" \
          --column=\"Key\" --column=\"Bit\" --column=\"Recipient\" $pubkeys"

    eval $CMD
}


chooseSecret () {

    seckeys=`gpg --list-secret-keys \
      | grep -A 1 sec \
      | awk '{print $2,$3,$4}' \
      | egrep -v "^[[:space:]]*$" \
      | awk 'NR%2{printf $1" ";next;}1' \
      | awk '{print substr($0,7,8)" "substr($0,1,5)" \""$2,$3,$4"\""}'`


    CMD="zenity --list \
          --width=550 --height=250 \
          --title=\"Choose private key...\" \
          --print-column=1 \
          --text=\"Choose your private key\" \
          --column=\"Key\" --column=\"Bit\" --column=\"Secret Key\" $seckeys"

    eval $CMD
}

readPassword () {
    echo "GETPIN" | pinentry-gtk-2 2> /dev/null | grep "D" | awk '{print $2}'
}


r=`chooseRecipient`
if [ -z "${r}" ]; then
    zenity --error --text="No Recipient specified."
    exit 1
fi
# fix zenity bug on double click
# https://bugzilla.gnome.org/show_bug.cgi?id=698683
r=`echo $r | awk '{split($0,a,"|"); print a[1]}'`



u=`chooseSecret`
if [ -z "${u}" ]; then
    zenity --error --text="No Secret key specified."
    exit 1
fi
# fix zenity bug on double click
# https://bugzilla.gnome.org/show_bug.cgi?id=698683
u=`echo $u | awk '{split($0,a,"|"); print a[1]}'`



p=`readPassword`
if [ -z "${p}" ]; then
    zenity --error --text="No Password specified."
    exit 1
fi


error=$(gpg -e -s --yes --batch --local-user $u --recipient $r --passphrase $p "${f}" 2>&1)
errno=$?

if [ "$errno" -gt "0" ]; then
    zenity --error --text="${error}\nreturn code: ${errno}"
    exit 1
else
    zenity --info --text="Encrypted."
    exit 0
fi

GPG mit zenity Gui

lockdoc

Well-Known Member

Rakor

Administrator

lockdoc

Well-Known Member

Rakor

Administrator

lockdoc

Well-Known Member

Wir schützen deine Privatsphäre