App-GroupSecret
view release on metacpan or search on metacpan
(or only have dependencies users are likely to already have installed).
groupsecret works by encrypting a secret with a symmetric cipher
protected by a secure random passphrase which is itself encrypted by
one or more SSH2 RSA public keys. Only those who have access to one of
the corresponding private keys are able to decrypt the passphrase and
access the secret.
The encrypted secret and passphrase are stored in a single keyfile. You
can even commit the keyfile in a public repo or in a private repo where
some untrusted users may have read access; the secret is locked away to
all except those with a private key to a corresponding public key that
has been added to the keyfile.
The keyfile is just a YAML file, so it's human-readable (except of
course for the encrypted parts). This make it easy to add to version
control and work with diffs. You can edit the keyfile by hand if you
learn its very simple structure, but this program makes it even easier
to manage the keyfile.
OPTIONS
bin/groupsecret view on Meta::CPAN
The goal of this program is to be easy to use and have few dependencies (or only have dependencies
users are likely to already have installed).
groupsecret works by encrypting a secret with a symmetric cipher protected by a secure random
passphrase which is itself encrypted by one or more SSH2 RSA public keys. Only those who have access
to one of the corresponding private keys are able to decrypt the passphrase and access the secret.
The encrypted secret and passphrase are stored in a single keyfile. You can even commit the keyfile
in a public repo or in a private repo where some untrusted users may have read access; the secret is
locked away to all except those with a private key to a corresponding public key that has been added
to the keyfile.
The keyfile is just a YAML file, so it's human-readable (except of course for the encrypted parts).
This make it easy to add to version control and work with diffs. You can edit the keyfile by hand if
you learn its very simple structure, but this program makes it even easier to manage the keyfile.
=head1 OPTIONS
=head2 --version
( run in 0.406 second using v1.01-cache-2.11-cpan-4ee56698ea0 )