gopass icon indicating copy to clipboard operation
gopass copied to clipboard

passage support

Open dominikschulz opened this issue 2 years ago • 3 comments

@FiloSottile has released passage and I'd like to make our age implementation compatible to it as much as possible.

Mostly because I trust Filippo to a great length and his approach is probably sane.

Once age v1.1.0 comes with plugin support I'd like to support that, too. So people can use their hardware tokens (at least YubiKeys) with gopass+age.

dominikschulz avatar Dec 18 '21 05:12 dominikschulz

Notable changes I've found so far:

  • IDFiles for age need to be renamed from .age-ids to .age-recipients
  • The whole keyring.go should go away. It will be replaced by a single identity file with (possibly) multiple password protected identities
  • We should consider sourcing age identities from (or maybe even storing them to - not sure) $HOME/.passage/identities
  • This one might get a bit messy, but maybe we can use $HOME/.passage/store as a fallback when not other store is defined and the age backend is selected.

dominikschulz avatar Dec 18 '21 06:12 dominikschulz

  • .age-ids has been renamed
  • keyring.go is mostly gone (except for backwards compatibility)

Next steps, if we choose to:

  • Use passage identities
  • Use passage store

dominikschulz avatar Dec 23 '21 08:12 dominikschulz

This is great, thanks for adding this so quickly.

To answer a question you had: I was using the previous age backend prior to your updates. Everything seems to be working well since the changes you made to support passage.

+1 vote for being fully compatible with age 1.1. This branch (https://github.com/FiloSottile/age/tree/filippo/plugins) seems stable for use with age-plugin-yubikey; not sure what other changes might be in store for 1.1.

kfken avatar Jan 09 '22 21:01 kfken