Small script that re-encrypts GPG-encrypted files with a new key

reencrypt.sh

#!/bin/bash

checkusage() {
  [[ $# -lt 2 ]] && err_exit 'Usage: reencrypt.sh KEY_ID FILE...'
}

err() { echo -e "$@" >&2; }

err_exit() {
  err "$@"
  exit 1
}

reencrypt() {
  local key_id="$1"
  local file="$2"
  mv ${file} ${file}.bak
  gpg --decrypt ${file}.bak \
    | gpg --recipient ${key_id} --encrypt --output ${file}
}

main() {
  checkusage "$@"
  local key_id=$1
  shift
  local files="$@"
  for file in $files; do
    reencrypt "${key_id}" "${file}"
  done
}

main "$@"

# Local Variables:
# indent-tabs-mode: nil
# sh-indentation: 2
# sh-basic-offset: 2
# End: