diff options
| -rw-r--r-- | pinentry.sh | 353 |
1 files changed, 353 insertions, 0 deletions
diff --git a/pinentry.sh b/pinentry.sh new file mode 100644 index 0000000..fce4404 --- /dev/null +++ b/pinentry.sh @@ -0,0 +1,353 @@ +#/bin/bash + +VERSION="0.1.0" +TIMEOUT="0" +DESCRIPTION="Enter password for GPG key" +PROMPT="Password:" +TITLE="GPG Key Credentials" +CREDENTIALPREFIX="gpgkey://" +KEYINFO="" +OKBUTTON="&OK" +CANCELBUTTON="&Cancel" +NOTOKBUTTON="&Do not do this" +PINERROR="" +EXTPASSCACHE=0 +REPEATPASSWORD=0 +REPEATDESCRIPTION="Confirm password for GPG key" +REPEATERROR="Error: Passwords did not match." + +assuan_result() { + #echo -n $(( (5 << 24) | $1 )) + case $1 in + 0) + echo -n "ERR 0 no error" + ;; + 62) + echo -n "ERR 83886142 timeout" + ;; + 99) + echo -n "ERR 83886179 cancelled" + ;; + 114) + echo -n "ERR 83886194 not confirmed" + ;; + 174) + echo -n "ERR 83886254 invalid option" + ;; + 257) + echo -n "ERR 83886337 general error" + ;; + 261) + echo -n "ERR 83886341 invalid value" + ;; + 275) + echo -n "ERR 83886355 unknown command" + ;; + esac +} + +getpassword() { + echo "$PINERROR" + echo "$DESCRIPTION" + return + local cmd_prompt=$(cat <<-DLM + \$cred = \$Host.ui.PromptForCredential("$TITLE", + "$PINERROR$DESCRIPTION", + "$KEYINFO", + "gpgkey://$KEYINFO", + "Generic", + "None,ReadOnlyUserName") + if (\$cred) { + Write-Output \$cred.GetNetworkCredential().Password + } +DLM + ) + local cmd_repeat=$(cat <<-DLM + \$cred = \$Host.ui.PromptForCredential("$TITLE", + "$REPEATDESCRIPTION", + "$KEYINFO", + "gpgkey://$KEYINFO", + "Generic", + "None,ReadOnlyUserName") + if (\$cred) { + Write-Output \$cred.GetNetworkCredential().Password + } +DLM + ) + local cmd_lookup=$(cat <<-DLM + \$cred = Get-StoredCredential -Target "$CREDENTIALPREFIX$KEYINFO" -Type GENERIC + if (\$cred) { + Write-Output \$cred.GetNetworkCredential().Password + } +DLM + ) + local credpassword + local credpasswordrepeat + local passwordfromcache=0 + PINERROR="" + if [ "$REPEATPASSWORD" -eq "0" ]; then + if [ "$EXTPASSCACHE" -eq "1" ]; then + if [ -n "$KEYINFO" ]; then + credpassword="$(powershell.exe -nologo -noprofile -noninteractive -command "$cmd_lookup")" + if [ -n "$credpassword" ]; then + echo -en "S PASSWORD_FROM_CACHE\nD $credpassword\nOK" + return + fi + fi + fi + fi + credpassword="$(powershell.exe -nologo -noprofile -noninteractive -command "$cmd_prompt")" + if [ -n "$credpassword" ]; then + if [ "$REPEATPASSWORD" -eq "1" ]; then + credpasswordrepeat="$(powershell.exe -nologo -noprofile -noninteractive -command "$cmd_repeat")" + if [ "$credpassword" == "$credpasswordrepeat" ]; then + echo -en "S PIN_REPEATED\nD $credpassword\nOK" + else + message "$REPEATERROR" > /dev/null + echo -n "$(assuan_result 114)" # unsure this is the correct error + fi + else + echo -en "D $credpassword\nOK" + fi + else + echo -n "$(assuan_result 99)" + fi +} + +removepassword() { + if [ -z "$1" ]; then + echo -n "$(assuan_result 261)" + return + fi + local cmd_remove=$(cat <<-DLM + try { + Remove-StoredCredential -Target "$CREDENTIALPREFIX$1" -Type GENERIC -ErrorAction Stop + } + catch { + Write-Output "$(assuan_result 261)" + return + } + Write-Output "OK" +DLM + ) + echo -n "$(powershell.exe -nologo -noprofile -noninteractive -command "$cmd_remove")" +} + +message() { + local desc + if [ -n "$1" ]; then + desc="$1" + else + desc="$DESCRIPTION" + fi + local cmd=$(cat <<-DLM + \$options = [System.Management.Automation.Host.ChoiceDescription[]] @("$OKBUTTON") + [int]\$defaultchoice = 0 + \$result = \$host.UI.PromptForChoice("$TITLE", + "$desc", + \$options, + \$defaultchoice) +DLM + ) + powershell.exe -nologo -noprofile -noninteractive -command "$cmd" > /dev/null + echo -n "OK" +} + +confirm() { + PINERROR="" + if [ "$1" == "--one-button" ]; then + echo "$(message)" + return + fi + local cmd=$(cat <<-DLM + \$options = [System.Management.Automation.Host.ChoiceDescription[]] @("$OKBUTTON", "$CANCELBUTTON") + [int]\$defaultchoice = 0 + \$result = \$host.UI.PromptForChoice("$TITLE", + "$DESCRIPTION", + \$options, + \$defaultchoice) + if (\$result) { + switch(\$result) + { + 0 { Write-Output "OK"} + 1 { Write-Output "$(assuan_result 99)"} + 2 { Write-Output "$(assuan_result 114)"} + } + } + else { + Write-Output "$(assuan_result 114)" + } +DLM + ) + local result="$(powershell.exe -nologo -noprofile -noninteractive -command "$cmd")" + echo -n "$result" +} + +settimeout() { + # https://stackoverflow.com/questions/21176487/adding-a-timeout-to-batch-powershell + TIMEOUT="$1" + echo -n OK +} + +setdescription() { + DESCRIPTION="$1" + echo -n OK +} + +setprompt() { + PROMPT="$1" + echo -n OK +} + +settitle() { + TITLE="$1" + echo -n OK +} + +setpinerror() { + PINERROR="** $1 ** " + echo -n "$PINERROR" +} + +setkeyinfo() { + if [ "$1" == "--clear" ]; then + KEYINFO="" + else + KEYINFO="$1" + fi + echo -n OK +} + +setrepeatpassword() { + REPEATPASSWORD=1 + REPEATDESCRIPTION="$1" + echo -n OK +} + +setrepeaterror () { + REPEATERROR="$1" + echo -n OK +} + +setokbutton() { + OKBUTTON="${$1//_/&}" + echo -n OK +} + +setcancelbutton() { + CANCELBUTTON="${$1//_/&}" + echo -n OK +} + +setnotokbutton() { + NOTOKBUTTON="${$1//_/&}" + echo -n OK +} + +getinfo() { + if [ "$1" == "version" ]; then + echo -en "D $VERSION\nOK" + elif [ "$1" == "pid" ]; then + echo -en "D $BASHPID\nOK" + else + echo -n "$(assuan_result 275)" + fi +} + +setoption() { + local key="$(echo "$1" | cut -d'=' -s -f1)" + local value="$(echo "$1" | cut -d'=' -s -f2)" + case $key in + allow-external-password-cache) + EXTPASSCACHE=1 + echo -n "OK" + ;; + default-ok) + echo -n $(setokbutton "$value") + ;; + default-cancel) + echo -n $(setcancelbutton "$value") + ;; + default-notok) + echo -n $(setnotokbutton "$value") + ;; + default-prompt) + echo -n $(setprompt "$value") + ;; + *) + echo -n "OK" + ;; + esac +} + +echo "OK Your orders please" +while IFS= read -r line; do + #echo "$line" >> /home/dalep/tracepin.txt + action="$(echo $line | cut -d' ' -f1)" + args="$(echo $line | cut -d' ' -s -f2-)" + #echo "action:$action:" + #echo "args:$args:" + case $action in + BYE) + echo "OK closing connection" + exit 0 + ;; + GETPIN) + echo "$(getpassword)" + ;; + SETTIMEOUT) + echo "$(settimeout "$args")" + ;; + SETDESC) + echo "$(setdescription "$args")" + ;; + SETPROMPT) + echo "$(setprompt "$args")" + ;; + SETTITLE) + echo "$(settitle "$args")" + ;; + SETKEYINFO) + echo "$(setkeyinfo "$args")" + ;; + SETOK) + echo "$(setokbutton "$args")" + ;; + SETCANCEL) + echo "$(setcancelbutton "$args")" + ;; + SETNOTOK) + echo "$(setnotokbutton "$args")" + ;; + CONFIRM) + echo "$(confirm "$args")" + ;; + MESSAGE) + echo "$(message)" + ;; + SETERROR) + echo "$(setpinerror "$args")" + ;; + GETINFO) + echo "$(getinfo "$args")" + ;; + OPTION) + echo "$(setoption "$args")" + ;; + SETREPEAT) + echo "$(setrepeatpassword "$args")" + ;; + SETREPEATERROR) + echo "$(setrepeaterror "$args")" + ;; + CLEARPASSPHRASE) + echo "$(removepassword "$args")" + ;; + RESET) + echo "OK" + ;; + *) + echo "OK" + ;; + esac +done |