secret-keeper 0.2.6 → 1.0.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 6eee9aa2b6dcee0664801bcfb7294086e25877e3a7817f28c6fb6e16603950ae
-  data.tar.gz: b038472f3d9d0e7d07c64e1c3e289bfca292f134e7183511cbda94eb0629bbb4
+  metadata.gz: a4af085b4a020f82a80ec5e4f2995fc676c6d24497b424ccfe5788d8fa83085b
+  data.tar.gz: 4f3c88876416d7dadf20f903338827b52c03ecb1799b5b31b823d5cd484e5513
 SHA512:
-  metadata.gz: 18060dff8cb457293f2945a8110dce11f6f868065cca4165b05a382610bbd50b084703cf2ce33ff6abac5736746470fc099b961ab91dae8106409fef30041fff
-  data.tar.gz: 61da7df18fb2116f8f79efd6a9128ca451d06f64753a765a8042e7eb83aa90b7ca01cf5ac16f6777fd4a8d1c7e41084f3af7d6030508b51fa3fd442892720fea
+  metadata.gz: 40512c3536a8f2b8824f3d6fbf97df57e8381fb7d5f135ef3ac05771a6ca9b472e52aa1818e35d7699400b688f918b6f534895eef04ff359d4706f99bd24da37
+  data.tar.gz: 5aecafc7b60fb43bc34b46744b63761db551b44d428e7fcfdb8afd8ee74e157a51f43903f45e3f8bf925150975d5c80e999344cef824e81e01c3603591f2190e

data/lib/secret-keeper.rb

@@ -4,7 +4,7 @@ require 'yaml'
 class SecretKeeper
   def self.encrypt_files
     sk = SecretKeeper.new
-    puts 'Encrypting...'
+    puts 'Encrypting...' unless sk.slience
     ok_queue = []
     sk.tasks.each do |task|
       from = task['encrypt_from']
@@ -12,17 +12,17 @@ class SecretKeeper
 
       result = sk.encrypt_file(from, to)
       ok_queue << result if result == :ok
-      puts "  * #{from} --> #{to}, #{result}"
+      puts "  * #{from} --> #{to}, #{result}" unless sk.slience
     end
     success = ok_queue.count == sk.tasks.count
-    puts success ? 'Done!' : 'Failed!'
+    puts success ? 'Done!' : 'Failed!' unless sk.slience
     success
   end
 
   def self.decrypt_files(remove_production=false)
     sk = SecretKeeper.new
-    print 'Decrypting...'
-    puts remove_production ? '(production config removed)' : nil
+    print 'Decrypting...' unless sk.slience
+    puts remove_production ? '(production config removed)' : nil unless sk.slience
 
     ok_queue = []
     sk.tasks.each do |task|
@@ -36,10 +36,10 @@ class SecretKeeper
       end
 
       ok_queue << result if result == :ok
-      puts "  * #{from} --> #{to}, #{result}"
+      puts "  * #{from} --> #{to}, #{result}" unless sk.slience
     end
     success = ok_queue.count == sk.tasks.count
-    puts success ? 'Done!' : 'Failed!'
+    puts success ? 'Done!' : 'Failed!' unless sk.slience
     success
   end
 
@@ -52,15 +52,21 @@ class SecretKeeper
     ev_name = config['ev_name'] || 'SECRET_KEEPER'
     fail "environment variable #{ev_name} not exist" if ENV[ev_name].nil?
 
-    @cipher_digest = ENV[ev_name]
     @tasks = config['tasks']
-    @using_cipher = OpenSSL::Cipher.new(config['cipher'])
+    @using_cipher = OpenSSL::Cipher.new(config['cipher'] || 'AES-256-CBC')
+    @cipher_key = Digest::SHA2.hexdigest(ENV[ev_name])[0...@using_cipher.key_len]
+
+    @slience = config['slience'] || false
   end
 
   def tasks
     @tasks
   end
 
+  def slience
+    @slience
+  end
+
   def encrypt_file(from_file, to_file)
     encrypted = File.open(from_file, 'rb') { |f| encrypt(f.read) }
     File.open(to_file, 'w:ASCII-8BIT') { |f| f.write(encrypted) }
@@ -71,7 +77,7 @@ class SecretKeeper
 
   def decrypt_file(from_file, to_file)
     decrypted = File.open(from_file, 'rb') { |f| decrypt(f.read) }
-    File.open(to_file, 'w') { |f| f.write(decrypted) }
+    File.open(to_file, 'w') { |f| f.write(decrypted.force_encoding('UTF-8')) }
     :ok
   rescue => e
     e
@@ -91,15 +97,13 @@ class SecretKeeper
 
   def encrypt(data)
     cipher = @using_cipher.encrypt
-    key_size_range = 0..(cipher.key_len-1)
-    cipher.key = Digest::SHA2.hexdigest(@cipher_digest)[key_size_range]
+    cipher.key = @cipher_key
     cipher.update(data) + cipher.final
   end
 
   def decrypt(data)
     cipher = @using_cipher.decrypt
-    key_size_range = 0..(cipher.key_len-1)
-    cipher.key = Digest::SHA2.hexdigest(@cipher_digest)[key_size_range]
+    cipher.key = @cipher_key
     cipher.update(data) + cipher.final
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: secret-keeper
 version: !ruby/object:Gem::Version
-  version: 0.2.6
+  version: 1.0.0
 platform: ruby
 authors:
 - Ray Lee
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2019-08-08 00:00:00.000000000 Z
+date: 2021-02-04 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rspec
@@ -54,7 +54,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.0.1
+rubygems_version: 3.1.4
 signing_key: 
 specification_version: 4
 summary: Keep all your secret files within openssl