PM/GPG.pm

# GPG layer for encrypt/decrypt passwords database
package GPG;

# Debug
use Data::Dumper;

sub new {
    my $class = shift;

    my $home = $ENV{HOME};
    my $db   = $home . "/.PM/db.sqlite";

    my $self = {
        _db   => $db,
        _home => $home,
    };

    bless $self, $class;
    return $self;
}

# Encrypt sqlite database with default key
# and save it in config dir
sub encrypt_db {
    my ( $self, $file ) = @_;
    my $db = $self->{_db};

    # Remove old database
    @rm_db = ( "rm", "-f", "$db" );
    system(@rm_db) == 0 or die "Cannot remove old database: $!\n";

    # Keys selection.
    my @enc_cmd;
    my $recipient;
    if ( -e $self->{_home} . "/.PM/.key" ) {
        open my $key_f, "<", $self->{_home} . "/.PM/.key"
            or die "Cannot open file: $!\n";
        while (<$key_f>) {
            $recipient = $_;
        }
        @enc_cmd = (
            "gpg",         "--output",   "$db",       "-a",
            "--recipient", "$recipient", "--encrypt", "$file",
        );
    }
    else {
        # gpg --output test.gpg --encrypt test -a --default-recipient-self
        @enc_cmd = (
            "gpg", "--output", "$db", "-a", "--default-recipient-self",
            "--encrypt", "$file",
        );
    }

    system(@enc_cmd) == 0
        or die "Cannot encrypt!\nDecrypted file: $file\nTraceback: $!\n";

    # Remove unencrypted file
    @rm_cmd = ( "rm", "-f", "$file" );
    system(@rm_cmd) == 0 or die "Cannot remove file $file: $!\n";

    # Change file permissions
    @chmod_cmd = ( "chmod", 600, $db );
    system(@chmod_cmd) == 0 or die "Cannot chmod $file: $!\n";

    return 0;
}

# Decrypt database, save it in new place
# and return path to file
sub decrypt_db {
    my ($self) = @_;
    my $db = $self->{_db};

    my $gpg = '/usr/bin/gpg';

    # Generate random file name
    my @chars = ( "A" .. "Z", "a" .. "z" );
    my $string;
    $string .= $chars[ rand @chars ] for 1 .. 10;
    my $file = '/tmp/' . 'pm.' . $string;

    # gpg --output /tmp/decryptfile --decrypt $db
    @dec_cmd = ( "$gpg", "--output", "$file", "--decrypt", "$db" );
    system(@dec_cmd) == 0 or die "Cannot decrypt $db: $!\n";

    # Change file permissions
    @chmod_cmd = ( "chmod", 600, $file );
    system(@chmod_cmd) == 0 or die "Cannot chmod $file: $!\n";

    return $file;
}

1;