Use age for encryption, it is simpler

diff --git a/README b/README
index 2389d941cdb8ea11917251adbe925d1d8c79a705..745f2a93286031c12396480d9abeee4f9ca8169d 100644 (file)
--- a/README
+++ b/README
@@ -27,7 +27,7 @@ to change path-variable setting, that points to GoGOST'es built utilities.
 
 * Optionally encrypt them (that also can be done with EE keypairs too):
     $ zeasypki encrypt ca/ecdsa/ecdsa-root.com
-    [GnuPG is invoked here]
+    [age is invoked here]
     $ print ca/ecdsa/ecdsa-root.com/*
     cer.pem
     key.pem.enc

diff --git a/zeasypki b/zeasypki
index 15586b4627ada05089eeebfdc7872a6e7888f8f4..7a579bf7a4e4693a784689b3ece233440e2ac6e4 100755 (executable)
--- a/zeasypki
+++ b/zeasypki
@@ -4,7 +4,6 @@
 
 set -e
 
-KEY_ENCRYPT_RECIPIENT=${KEY_ENCRYPT_RECIPIENT:-12AD32689C660D426967FD75CB8205632107AD8A}
 COUNTRY=${COUNTRY:-RU}
 
 path=(
@@ -14,11 +13,11 @@ path=(
 )
 
 key_encrypt() {
-    gpg --encrypt --recipient $KEY_ENCRYPT_RECIPIENT
+    age -R ~/.age/general.pub
 }
 
 key_decrypt() {
-    gpg --decrypt
+    age -d -i ~/.age/general.age
 }
 
 # ------------------------ >8 ------------------------