majic-scripts Changeset

Changeset - 04796d35fcae

Parent rev.

Child rev.

[Not reviewed]

0 1 0

Branko Majic (branko) - 4 years ago 2020-06-29 04:18:43
branko@majic.rs

Enforce use of specific encryption keys, which also fixes problems if a user has multiple encryption sub-keys in the keyring.

1 file changed with 1 insertions and 1 deletions:

openpgp/gitprotect.sh

0 comments (0 inline, 0 general)

openpgp/gitprotect.sh

➞

Show inline comments

@@ @@ -297,7 +297,7 @@ elif [[ $command = "encrypt" ]]; then @@
         # Only use non-expired sub-keys that have encryption capability.
         if [[ $key_validity != e && $key_capabilities =~ .*e.* ]]; then
             recipients+=("$key_id")
             recipientArgs+=("-r" "$key_id")
+            recipientArgs+=("-r" "$key_id!")
         fi
     done < <(gpg2 "${gnupgArgs[@]}" --list-public-keys --with-colons | grep '^sub' | awk 'BEGIN { FS = ":" } ; { print $2, $5, $12 }')

0 comments (0 inline, 0 general)