socsvn commit: r257613 - soc2013/def/crashdump-head/etc/rc.d

[def at FreeBSD.org]

Author: def
Date: Sun Sep 22 15:51:23 2013
New Revision: 257613
URL: http://svnweb.FreeBSD.org/socsvn/?view=rev&rev=257613

Log:
  Change dumpkey to decrypt a symmetric key.

Modified:
  soc2013/def/crashdump-head/etc/rc.d/dumpkey

Modified: soc2013/def/crashdump-head/etc/rc.d/dumpkey
==============================================================================
--- soc2013/def/crashdump-head/etc/rc.d/dumpkey	Sun Sep 22 14:53:07 2013	(r257612)
+++ soc2013/def/crashdump-head/etc/rc.d/dumpkey	Sun Sep 22 15:51:23 2013	(r257613)
@@ -10,6 +10,9 @@
 start_cmd="dumpkey_start"
 start_precmd="dumpkey_prestart"
 stop_cmd=":"
+decrypt_precmd="dumpkey_predecrypt"
+decrypt_cmd="dumpkey_decrypt"
+extra_commands="decrypt"
 
 dumpkey_prestart()
 {
@@ -29,5 +32,22 @@
 	/sbin/dumpkey -p ${dumpkey_pub}
 }
 
+dumpkey_predecrypt()
+{
+	if [ ! -r "${dumpkey_priv}" ]; then
+		warn "The private RSA key doesn't exist. It's not possible to decrypt the symmetric key."
+		return 1
+	fi
+}
+
+dumpkey_decrypt()
+{
+	if [ $# -gt 0 ]; then
+		/usr/bin/openssl rsautl -decrypt -inkey ${dumpkey_priv} -in "$*" -out "$*-decrypted"
+	else
+		echo "You have to specify an encrypted symmetric key."
+	fi
+}
+
 load_rc_config $name
-run_rc_command "$1"
+run_rc_command "$@"