Module: YamlRecrypt::Gpg

Defined in:
lib/yaml_recrypt/gpg.rb

Class Method Summary collapse

Class Method Details

.decrypt(ciphertext, gpg_home) ⇒ Object 



21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
 
# File 'lib/yaml_recrypt/gpg.rb', line 21

def self.decrypt(ciphertext, gpg_home)
  gnupghome = gpg_home

  GPGME::Engine.home_dir = gnupghome

  ctx = GPGME::Ctx.new
  # Example of how to add support for asking the passphrase
  #  if hiera?
  #   GPGME::Ctx.new
  # else
  #   GPGME::Ctx.new(:passphrase_callback => method(:passfunc))
  # end

  if !ctx.keys.empty?
    raw = GPGME::Data.new(ciphertext)
    txt = GPGME::Data.new

    begin
      txt = ctx.decrypt(raw)
    rescue GPGME::Error::DecryptFailed => e
      warn("Fatal: Failed to decrypt ciphertext (check settings and that you are a recipient)")
      raise e
    rescue Exception => e
      warn("Warning: General exception decrypting GPG file")
      raise e
    end

    txt.seek 0
    txt.read
  else
    warn("No usable keys found in #{gnupghome}. Check :gpg_gnupghome value in hiera.yaml is correct")
    raise ArgumentError, "No usable keys found in #{gnupghome}. Check :gpg_gnupghome value in hiera.yaml is correct"
  end
end

.gnupghome ⇒ Object 



5
6
7
8
9
10
11
12
13
14
15
16
17
 
# File 'lib/yaml_recrypt/gpg.rb', line 5

def self.gnupghome
gnupghome = self.option :gnupghome
debug("GNUPGHOME is #{gnupghome}")
  if gnupghome.nil? || gnupghome.empty?
    warn("No GPG home directory configured, check gpg_gnupghome configuration value is correct")
    raise ArgumentError, "No GPG home directory configured, check gpg_gnupghome configuration value is correct"
  elsif !File.directory?(gnupghome)
    warn("Configured GPG home directory #{gnupghome} doesn't exist, check gpg_gnupghome configuration value is correct")
    raise ArgumentError, "Configured GPG home directory #{gnupghome} doesn't exist, check gpg_gnupghome configuration value is correct"
  else
    gnupghome
  end
end