mirror of https://github.com/mitchell/selfpass.git
95 lines
2.1 KiB
Go
95 lines
2.1 KiB
Go
package commands
|
|
|
|
import (
|
|
"context"
|
|
"encoding/base64"
|
|
"encoding/hex"
|
|
"fmt"
|
|
"time"
|
|
|
|
"github.com/spf13/cobra"
|
|
|
|
clitypes "github.com/mitchell/selfpass/cli/types"
|
|
"github.com/mitchell/selfpass/credentials/types"
|
|
"github.com/mitchell/selfpass/crypto"
|
|
)
|
|
|
|
func MakeCBCtoGCM(repo clitypes.ConfigRepo, initClient CredentialClientInit) *cobra.Command {
|
|
cbcToGCM := &cobra.Command{
|
|
Use: "cbc-to-gcm",
|
|
Hidden: true,
|
|
Run: func(cmd *cobra.Command, args []string) {
|
|
masterpass, cfg, err := repo.OpenConfig()
|
|
check(err)
|
|
|
|
key, err := hex.DecodeString(cfg.GetString(clitypes.KeyPrivateKey))
|
|
check(err)
|
|
|
|
keypass, err := crypto.CombinePasswordAndKey([]byte(masterpass), key)
|
|
check(err)
|
|
|
|
ctx, cancel := context.WithTimeout(context.Background(), time.Second*60)
|
|
defer cancel()
|
|
|
|
client := initClient(ctx)
|
|
|
|
mdch, errch := client.GetAllMetadata(ctx, "")
|
|
|
|
for {
|
|
select {
|
|
case err := <-errch:
|
|
check(err)
|
|
case md, ok := <-mdch:
|
|
if !ok {
|
|
fmt.Println("All done.")
|
|
return
|
|
}
|
|
|
|
cred, err := client.Get(ctx, md.ID)
|
|
check(err)
|
|
|
|
passbytes, err := base64.StdEncoding.DecodeString(cred.Password)
|
|
check(err)
|
|
|
|
plainpass, err := crypto.CBCDecrypt(keypass, passbytes)
|
|
check(err)
|
|
|
|
passbytes, err = crypto.GCMEncrypt(keypass, plainpass)
|
|
check(err)
|
|
|
|
cred.Password = base64.StdEncoding.EncodeToString(passbytes)
|
|
|
|
if cred.OTPSecret != "" {
|
|
passbytes, err := base64.StdEncoding.DecodeString(cred.OTPSecret)
|
|
check(err)
|
|
|
|
plainpass, err := crypto.CBCDecrypt(keypass, passbytes)
|
|
check(err)
|
|
|
|
passbytes, err = crypto.GCMEncrypt(keypass, plainpass)
|
|
check(err)
|
|
|
|
cred.OTPSecret = base64.StdEncoding.EncodeToString(passbytes)
|
|
}
|
|
|
|
_, err = client.Update(ctx, cred.ID, types.CredentialInput{
|
|
MetadataInput: types.MetadataInput{
|
|
Tag: cred.Tag,
|
|
SourceHost: cred.SourceHost,
|
|
LoginURL: cred.LoginURL,
|
|
Primary: cred.Primary,
|
|
},
|
|
OTPSecret: cred.OTPSecret,
|
|
Password: cred.Password,
|
|
Email: cred.Email,
|
|
Username: cred.Username,
|
|
})
|
|
check(err)
|
|
}
|
|
}
|
|
},
|
|
}
|
|
|
|
return cbcToGCM
|
|
}
|