generate_gpg

#!/bin/bash -e

. settings

if [[ -d $KEYDIR ]] ; then
	echo "Keydir $KEYDIR already exists"
	exit 1
fi

if [[ -n $FULLGPGKEY ]] ; then
	echo "The full GPG key is already set for $VERSION"
	echo "You need to use import_gpg_private or remove the setting"
	exit 2
fi

mkdir -m 0700 $KEYDIR

( gopass show --password "$PASS_NAME_GPG" 2> /dev/null || gopass generate "$PASS_NAME_GPG" 20 ) > /dev/null

GPG_SETTINGS=$(mktemp)
trap "rm -f $GPG_SETTINGS" EXIT
cat > $GPG_SETTINGS <<EOF
     %echo Generating GPG keys
     Key-Type: RSA
     Key-Length: 4096
     Name-Real: $SIGNER_NAME
     Name-Comment: $VERSION
     Name-Email: $SIGNER
     Expire-Date: $GPG_EXPIRE
     Passphrase: $(gopass show --password "$PASS_NAME_GPG")
     # Do a commit here, so that we can later print "done" :-)
     %commit
     %echo done
EOF
gpg2 --homedir $KEYDIR --batch --gen-key $GPG_SETTINGS

echo "Setting FULLGPGKEY in ${RELEASEDIR}/settings"
FULLGPGKEY="$(gpg2 --homedir $KEYDIR --batch --list-keys "${SIGNER_NAME} (${VERSION}) <${SIGNER}>" | sed -n '2s/\s//g p')"
echo "FULLGPGKEY='$FULLGPGKEY'" >> "${RELEASEDIR}/settings"