A quick script to decypher and reencrypt all the content of a password-store repository when you want to add or change your gpg keys

migrate_key.sh

#!/usr/bin/env bash

[ ! -n "$1" ] && echo "You must provide the new key id" && exit 1

recipient_chain=
for recip in $@; do
    recipient_chain+="-r $recip "
done

for gpgfile in `find . -type f -name *.gpg`; do
  real_name=$(basename "$gpgfile" '.gpg')

  echo "Decyphering $real_name"
  gpg -d "$gpgfile" > "new_${real_name}"
  rm "$gpgfile"

  echo "Recyphering $real_name"
  echo "gpg $recipient_chain -e ${real_name}"
  gpg $recipient_chain -e "new_${real_name}"
  rm "new_${real_name}"
  mv "new_${real_name}.gpg" "$gpgfile"
done

rm .gpg-id
for recip in $@; do
    echo "$recip" >> .gpg-id
done