* Optionally encrypt them (that also can be done with EE keypairs too):
$ zeasypki encrypt ca/ecdsa/ecdsa-root.com
- [GnuPG is invoked here]
+ [age is invoked here]
$ print ca/ecdsa/ecdsa-root.com/*
cer.pem
key.pem.enc
set -e
-KEY_ENCRYPT_RECIPIENT=${KEY_ENCRYPT_RECIPIENT:-12AD32689C660D426967FD75CB8205632107AD8A}
COUNTRY=${COUNTRY:-RU}
path=(
)
key_encrypt() {
- gpg --encrypt --recipient $KEY_ENCRYPT_RECIPIENT
+ age -R ~/.age/general.pub
}
key_decrypt() {
- gpg --decrypt
+ age -d -i ~/.age/general.age
}
# ------------------------ >8 ------------------------