diff options
Diffstat (limited to '.travis/decrypt-if-have-key')
-rwxr-xr-x | .travis/decrypt-if-have-key | 35 |
1 files changed, 35 insertions, 0 deletions
diff --git a/.travis/decrypt-if-have-key b/.travis/decrypt-if-have-key new file mode 100755 index 0000000000..b585d12c1e --- /dev/null +++ b/.travis/decrypt-if-have-key @@ -0,0 +1,35 @@ +#!/bin/bash + +set -e + +# Decrypt our private files; changes to this file should be inspected +# closely to ensure they do not create information leaks + +eval key="\${encrypted_${1}_key}" +eval iv="\${encrypted_${1}_iv}" + +if [ ! "$key" ] +then + echo "No aes key present - skipping decryption" + exit 0 +fi + +for i in .travis/*.enc +do + u=$(echo $i | sed -e 's/.enc$//') + openssl aes-256-cbc -K "$key" -iv "$iv" -in $i -out $u -d +done + +if [ -f .travis/travis_rsa ] +then + echo "ssh key present - loading agent" + eval "$(ssh-agent -s)" + + # add key, then remove to prevent leaks + chmod 600 .travis/travis_rsa + ssh-add .travis/travis_rsa + rm -f .travis/travis_rsa + touch .travis/travis_rsa.ready +else + echo "No ssh key present - skipping agent start" +fi |