blob: be1b42296ff39ab74e69f18ecdc59b2795f704da (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
|
#
# zsh/gpg.zsh
#
# NOTE: `gpg-agent' is configured to be launched in `~/.profile'.
# This `GPG_TTY' variable should be set to the correct TTY where the shell
# is running. See `gpg-agent(1)' for more details.
export GPG_TTY=$(tty)
# Set SSH to use `gpg-agent' as the SSH agent support is enabled
# See `gpg-agent(1)' for more details.
unset SSH_AGENT_PID
if [ "${gnupg_SSH_AUTH_SOCK_by:-0}" -ne $$ ]; then
export SSH_AUTH_SOCK="$(gpgconf --list-dirs agent-ssh-socket)"
fi
# Restart `gpg-agent'
restart-gpg-agent() {
gpgconf --kill gpg-agent >/dev/null 2>&1
gpg-agent --daemon --enable-ssh-support \
--pinentry-program ${HOME}/bin/pinentry >/dev/null 2>&1
}
# Let pinentry know which console to display in for `ssh-agent'.
#
# Since the 'ssh-agent' protocol does not contain a mechanism for telling
# the agent on which terminal/display it is running, gpg-agent's
# ssh-support can just use the TTY or X display when `gpg-agent' has been
# started, which may be before the X session startup. Therefore, when the
# switched to the X session, or login remotely through SSH, the `pinentry'
# will get popped up on whatever display the `gpg-agent' has been started
# or may just fail. In this case, a manual update is necessary.
#
# This will set startup TTY and X11 DISPLAY variables to the values of
# this session.
#
# Credits:
# * GnuPG: Commonly Seen Problems
# https://www.gnupg.org/documentation/manuals/gnupg/Common-Problems.html
# * `gpg-agent(1)': option `--enable-ssh-support'
#
update-gpg-tty() {
gpg-connect-agent updatestartuptty /bye >/dev/null
}
update-pinentry-app() {
echo "term" > ${XDG_RUNTIME_DIR}/pinentry-app
}
# Hook the above functions to be exec'ed before every command execuation
#
# Credit: http://blog.mrloop.com/workflow/2017/02/09/pin-entry.html
#
autoload -U add-zsh-hook
zsh-preexec() {
update-gpg-tty
update-pinentry-app
}
add-zsh-hook preexec zsh-preexec
# Delete all identities from the `gpg-agent', which is similar to
# `ssh-add -D`.
#
# Credit: http://blog.mrloop.com/workflow/2017/02/09/pin-entry.html
#
ssh-delete() {
grep -o '^[A-Z0-9]*' ${HOME}/.gnupg/sshcontrol | \
xargs -I'%' rm ${HOME}/.gnupg/private-keys-v1.d/'%'.key
echo "" > ${HOME}/.gnupg/sshcontrol
}
# vim: set ts=8 sw=4 tw=0 fenc=utf-8 ft=zsh: #
|
