x509crypt.git

diff --git a/README.md b/README.md
new file mode 100644
index 0000000000000000000000000000000000000000..e69de29bb2d1d6434b8b29ae775ad8c2e48c5391
Binary files /dev/null and b/README.md differ




diff --git a/doc/decrypt.sh b/doc/decrypt.sh
new file mode 100755
index 0000000000000000000000000000000000000000..4c46e653add7658966137ba68843cb070d227a5b
--- /dev/null
+++ b/doc/decrypt.sh
@@ -0,0 +1,3 @@
+#! /bin/bash -x
+
+openssl smime -decrypt -binary -in encrypted.zip.enc -inform DER -out decrypted.txt -inkey ca.key -passin pass:your_password




diff --git a/doc/encrypt.sh b/doc/encrypt.sh
new file mode 100755
index 0000000000000000000000000000000000000000..1fee184d6b4488be9575989260929e6d9d76dc4d
--- /dev/null
+++ b/doc/encrypt.sh
@@ -0,0 +1,5 @@
+#! /bin/bash -x
+
+#openssl smime -encrypt -binary -aes-256-cbc -in plainfile.zip -out encrypted.zip.enc -outform DER yourSslCertificate.pem
+openssl smime -encrypt -binary -aes-256-cbc -in prova.txt -out encrypted.zip.enc  -outform DER ca.crt
+




diff --git a/x509crypt b/x509crypt
new file mode 100755
index 0000000000000000000000000000000000000000..261ad9aa5e14ed608b68d9a7b2c8bd0592050e8c
--- /dev/null
+++ b/x509crypt
@@ -0,0 +1,99 @@
+#! /bin/bash 
+
+# Paolo Lulli 2014
+
+CONFIG_DIR=$HOME/.x509crypt
+
+CONFIG_CERT_NAME="certificate"
+
+
+test -d $CONFIG_DIR || mkdir -p $CONFIG_DIR
+
+profile_name="default"
+
+
+read_profile(){
+	echo "Profile name:"
+	read  profile_name
+}
+
+generate_keys(){
+	echo "GENERATE KEYS"
+	openssl genrsa -out $CONFIG_DIR/$profile_name/certs/$CONFIG_CERT_NAME.key 2048
+	openssl req -batch -new -key $CONFIG_DIR/$profile_name/certs/$CONFIG_CERT_NAME.key -out $CONFIG_DIR/$profile_name/certs/$CONFIG_CERT_NAME.csr -config $CONFIG_DIR/$profile_name/conf/$profile_name-config
+	openssl x509 -req -days 365 -in $CONFIG_DIR/$profile_name/certs/$CONFIG_CERT_NAME.csr -signkey $CONFIG_DIR/$profile_name/certs/$CONFIG_CERT_NAME.key -out $CONFIG_DIR/$profile_name/certs/$CONFIG_CERT_NAME.crt
+}
+
+export_key(){
+	echo "EXPORT PUBLIC KEY:[$CONFIG_CERT_NAME.key]"
+	cp $CONFIG_DIR/$profile_name/certs/$CONFIG_CERT_NAME.key .
+}
+setup_profile(){
+	echo "SETUP PROFILE"
+	test -d $CONFIG_DIR/$profile_name || mkdir -p $CONFIG_DIR/$profile_name
+	test -d $CONFIG_DIR/$profile_name/conf || mkdir -p $CONFIG_DIR/$profile_name/conf
+	test -d $CONFIG_DIR/$profile_name/certs || mkdir -p $CONFIG_DIR/$profile_name/certs
+}
+
+file_decrypt(){
+	echo "FILE DECRYPT: $1"
+	decrypted_file=$1".cleartext"
+	#openssl smime -decrypt -binary -in $1 -inform DER -out $decrypted_file -inkey $CONFIG_DIR/$profile_name/certs/$CONFIG_CERT_NAME.key -passin pass:your_password
+	openssl smime -decrypt -binary -in $1 -inform DER -out $decrypted_file -inkey $CONFIG_DIR/$profile_name/certs/$CONFIG_CERT_NAME.key 
+}
+file_encrypt(){
+	echo "FILE ENCRYPT: $1"
+	encrypted_file=$1".enc"
+	openssl smime -encrypt -binary -aes-256-cbc -in $1 -out $encrypted_file  -outform DER $CONFIG_DIR/$profile_name/certs/$CONFIG_CERT_NAME.crt
+}
+usage(){
+	echo "$0 -e <file> : ENCRYPTS FILE"
+	echo "$0 -d <file> : DECRYPTS FILE"
+	echo "$0 -g        : GENERATE KEYS"
+	echo "$0 -p        : SETUP PROFILE"
+	echo "$0 -x        : EXPORT PUB KEY"
+}
+
+
+if [ "$#" -gt 2 ]; then 
+	usage
+	exit 
+fi
+if [ "$#" -eq 0 ]; then 
+	usage
+	exit 
+fi
+
+if [ "$#" -eq 1 ]; then 
+	if [ "$1" == "-p" ]; then
+		setup_profile
+		exit 
+	fi
+	if [ "$1" == "-g" ]; then
+		generate_keys
+		exit 
+	fi
+	if [ "$1" == "-x" ]; then
+		export_key
+		exit 
+	fi
+	usage
+fi
+if [ "$#" -eq 2 ]; then 
+	input_file=$2
+	if [ "$1" == "-e" ]; then
+		file_encrypt $input_file
+		file_decrypt $input_file".enc"
+		diff $input_file $input_file".enc.cleartext" || echo "ERROR: BAD ENCRYPTION"	
+		rm $input_file".enc.cleartext"
+		exit 
+	fi
+	if [ "$1" == "-d" ]; then
+		file_decrypt $input_file
+		exit 
+	fi
+
+	usage
+fi
+#read_profile
+echo "You choose profile: [$profile_name]"