Decrypt pfSense encrypted config backups

decrypt-pfsense-config.sh

#!/bin/bash
# Adapted from https://forum.netgate.com/topic/139561
set -o pipefail

if [[ $# -lt 1 ]]; then
    echo "Usage: $(basename $0) <encrypted-config>"
    exit 1
fi
inpath="$1"
tmpout="$(mktemp)"

cat "$inpath" \
    | openssl enc -a -d -aes-256-cbc -md md5 \
    > $tmpout
exitstatus=$?

if [[ $exitstatus -eq 0 ]]; then
    cat $tmpout
fi

rm $tmpout
exit $exitstatus

from openssl enc manual page:

       -a  Base64 process the data. This means that if encryption is taking place the data is base64 encoded after encryption. If decryption is set then the input data is base64
           decoded before being decrypted.