leeloo 0.0.3 → 0.0.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 7f0947c2693f489c179cb9503873aae98b28e8c3
-  data.tar.gz: 7ca98af2b5903a47a37ec92872011615a670c294
+  metadata.gz: fa4daaab758be586a6e9f7fc44e2bb4445c7adf5
+  data.tar.gz: af1ae064a581a8807a193d3a6ffe6be7a37476cd
 SHA512:
-  metadata.gz: c4becf8486245bc0c0f6a1bd0846103f6a71d9166ebab18aba28d3e092a5804e9e860ad09fe6feba4e93eb1fa0530c9148bb71103154c8121dd0939b7c23067d
-  data.tar.gz: 22d06419760f57701b34c3f7f4be4694dbe221afbdcc73377da6e36e85e1dbf2b2945f0a51b2e00ad4cf34c7bc03d2360fac08aa6ab64efb0b3ecdf05df8141e
+  metadata.gz: d0426b52b963eab544459e05ad7c8cf986e3781c3ccc210fc873f9c04be611a3ded5089031532aa79df22d62894c97fbb3c8483805aa957d322c7bee48518639
+  data.tar.gz: 6d2ae73665be34ca2dd566092ce4180a525e8fa06dbd5135a47ba1a39d7752b8a78800ab2460b48351426b461dd0d1205662d3da25613747a332d3459a84681e

data/lib/leeloo/command.rb

@@ -1,4 +1,5 @@
 require 'commander/import'
+require 'securerandom'
 
 module Leeloo
   class Command
@@ -36,54 +37,83 @@ module Leeloo
       end
 
       command :"list secret" do |c|
-        c.syntax      = 'leeloo list secret <keystore>'
-        c.description = "Display secrets list"
-        c.action do |args, options|
-          abort "keytore is missing" unless args.length == 1
+        c.syntax      = 'leeloo list secret [options]'
+        c.description = "Display secrets list of keystore (private by default)"
+        c.option '--keystore STRING', String, 'a selected keystore'
 
-          Secret::list Config.get_keystore(args.first)
+        c.action do |args, options|
+          options.default :keystore => 'private'
+          Secret::list Config.get_keystore(options.keystore)
         end
       end
 
       command :"add keystore" do |c|
         c.syntax      = 'leeloo add keystore <name> <path>'
-        c.description = "add a new keystore"
+        c.description = "Add a new keystore"
 
         c.action do |args, options|
 
           abort "name or path are missing" unless args.length == 2
+          name = args.first
+          keystore = args.last
 
-          Keystore.add_keystore args.first, args.last
-          Config.add_keystore args.first, args.last
+          Keystore.add_keystore name, keystore
+          Config.add_keystore name, keystore
+        end
+      end
+
+      command :"sync secrets" do |c|
+        c.syntax      = 'leeloo recrypt secrets'
+        c.description = "(re)sync all secrets from a given keystore (private by default)"
+        c.option '--keystore STRING', String, 'a selected keystore'
+
+        c.action do |args, options|
+          options.default :keystore => 'private'
+          Secret.sync_secrets Config.get_keystore(options.keystore)
         end
       end
 
       command :"add secret" do |c|
-        c.syntax      = 'leeloo add secret <keystore> <name>'
-        c.description = "add a new secret in a keystore"
+        c.syntax      = 'leeloo add secret <name>'
+        c.description = "Add a new secret in a keystore (private by default)"
+        c.option '--keystore STRING', String, 'a selected keystore'
+        c.option '--generate INTEGER', Integer, 'a number of randomized characters'
+        c.option '--stdin', nil, 'secret given by stdin pipe'
 
         c.action do |args, options|
-          keystore = Config.get_keystore(args.first)
+          abort "name is missing" unless args.length == 1
+          name = args.first
+
+          options.default :keystore => 'private'
+          keystore = Config.get_keystore(options.keystore)
+
+          secret = nil
+          secret = STDIN.read if options.stdin
+          secret = SecureRandom.base64(options.generate) if options.generate
 
-          abort "keytore or name are missing" unless args.length == 2
-          secret  = password "secret"
-          confirm = password "confirm it"
-          abort "not the same secret" unless secret == confirm
+          unless secret
+              secret  = password "secret"
+              confirm = password "confirm it"
+              abort "not the same secret" unless secret == confirm
+          end
 
-          Secret.add_secret keystore, args.last, secret
+          Secret.add_secret keystore, name, secret
         end
       end
 
       command :"read secret" do |c|
-        c.syntax      = 'leeloo read secret <keystore> <name>'
-        c.description = "read a secret from a keystore"
+        c.syntax      = 'leeloo read secret <name>'
+        c.description = "Display a secret from a keystore (private by default)"
+        c.option '--keystore STRING', String, 'a selected keystore'
 
         c.action do |args, options|
-          keystore = Config.get_keystore(args.first)
+          abort "name is missing" unless args.length == 1
+          name = args.first
 
-          abort "keytore or name are missing" unless args.length == 2
+          options.default :keystore => 'private'
+          keystore = Config.get_keystore(options.keystore)
 
-          Secret.read_secret keystore, args.last
+          Secret.read_secret keystore, name
         end
       end
     end

data/lib/leeloo/config.rb

@@ -9,6 +9,9 @@ module Leeloo
     @@keystores = []
 
     def self.init
+      unless Keystore::secret_key_exists?
+        abort "a secret key PGP is mandatory"
+      end
       Keystore::add_keystore "private", "#{PATH}/private"
       Config::add_keystore "private", "#{PATH}/private"
       say "Initialization completed"

data/lib/leeloo/keystore.rb

@@ -5,6 +5,10 @@ require 'git'
 module Leeloo
   class Keystore
 
+    def self.secret_key_exists?
+      GPGME::Key.find(:secret, nil, ).empty?
+    end
+
     def self.add_keystore name, path
       FileUtils.mkdir_p path
       FileUtils.mkdir_p "#{path}/secrets/"

data/lib/leeloo/secret.rb

@@ -1,6 +1,7 @@
 require 'gpgme'
 require 'tty-tree'
 require 'git'
+require 'fileutils'
 
 module Leeloo
   class Secret
@@ -11,12 +12,9 @@ module Leeloo
 
     def self.add_secret(keystore, name, secret)
       recipients = []
-      Dir.foreach("#{keystore}/keys") do |key|
-        unless File.directory? key
-          recipients << File.basename(key, ".*")
-          GPGME::Key.import(File.open("#{keystore}/keys/#{key}"))
-        end
-      end
+      Dir.foreach("#{keystore}/keys") { |key| recipients << File.basename(key, ".*") unless File.directory? key }
+
+      FileUtils.mkdir_p File.dirname "#{keystore}/secrets/#{name}"
 
       crypto = GPGME::Crypto.new :always_trust => true
       crypto.encrypt secret,
@@ -34,5 +32,42 @@ module Leeloo
       crypto = GPGME::Crypto.new
       say crypto.decrypt File.open("#{keystore}/secrets/#{name}")
     end
+
+    def self.sync_secrets keystore
+
+      g = Git.open keystore
+
+      recipients = []
+      Dir.foreach("#{keystore}/keys") do |key|
+        unless File.directory? key
+          recipients << File.basename(key, ".*")
+          GPGME::Key.import(File.open("#{keystore}/keys/#{key}"))
+        end
+      end
+
+      crypto = GPGME::Crypto.new :always_trust => true
+      find_secrets("#{keystore}/secrets").each do |secret|
+          say "."
+          decrypted = crypto.decrypt File.open(secret)
+          crypto.encrypt decrypted,
+            :output => File.open(secret,"w+"),
+            :recipients => recipients
+          g.add secret
+      end
+
+      g.commit "sync"
+
+      say "keystore synced successfully"
+    end
+
+    def self.find_secrets path
+      elements = []
+      Dir.glob("#{path}/**") do |element|
+        elements << element unless Dir.exist? element
+        elements << find_secrets(element) if Dir.exist? element
+      end
+      return elements.flatten
+    end
+
   end
 end

data/lib/leeloo/version.rb

@@ -1,4 +1,4 @@
 module Leeloo
-  VERSION     = '0.0.3'.freeze
+  VERSION     = '0.0.4'.freeze
   DESCRIPTION = "The easiest way to share securely your secrets".freeze
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: leeloo
 version: !ruby/object:Gem::Version
-  version: 0.0.3
+  version: 0.0.4
 platform: ruby
 authors:
 - Sylvek
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2017-09-06 00:00:00.000000000 Z
+date: 2017-09-23 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: commander
@@ -157,7 +157,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements: []
 rubyforge_project: 
-rubygems_version: 2.2.2
+rubygems_version: 2.6.10
 signing_key: 
 specification_version: 4
 summary: The easiest way to share securely your secrets