tool: Have 'sq inspect' show whether the secret key is encrypted

  - Change `sq inspect` to also show whether any secret key material
    is encrypted or not.

1 files changed, 10 insertions, 0 deletions

diff --git a/tool/src/commands/inspect.rs b/tool/src/commands/inspect.rs
index b6f96662..1f1c7c32 100644
--- a/tool/src/commands/inspect.rs
+++ b/tool/src/commands/inspect.rs
@@ -9,6 +9,7 @@ use crate::openpgp::cert::prelude::*;
 use openpgp::packet::key::PublicParts;
 use crate::openpgp::parse::{Parse, PacketParserResult};
 use crate::openpgp::policy::Policy;
+use crate::openpgp::packet::key::SecretKeyMaterial;
 
 use super::dump::Convert;
 
@@ -248,6 +249,15 @@ fn inspect_key(policy: &dyn Policy,
     if let Some(bits) = key.mpis().bits() {
         writeln!(output, "{}Public-key size: {} bits", indent, bits)?;
     }
+    if let Some(secret) = key.optional_secret() {
+        writeln!(output, "{}     Secret key: {}",
+                 indent,
+                 if let SecretKeyMaterial::Unencrypted(_) = secret {
+                     "Unencrypted"
+                 } else {
+                     "Encrypted"
+                 })?;
+    }
     writeln!(output, "{}  Creation time: {}", indent,
              key.creation_time().convert())?;
     if let Some(vka) = vka {