encrypt.sh

#!/bin/bash

# Script that signs an input file with all keys of a given Apache PMC
# Example use: 
#
#    ./encrypt.sh https://people.apache.org/keys/group/sling.asc somefile.txt 
#
# To list which keys a file has been encrypted for, use
#
#    gpg --list-only --no-default-keyring --secret-keyring /dev/null <filename>
#
export KEYS=$1
export IN=$2
export ID=$$

echo "Encrypting $IN with keys found at $KEYS"

# import keys into the main keyring, if needed
curl -s  $KEYS | gpg --import

# import keys into a temporary keyring, to be able to list their email addresses
curl -s $KEYS  | gpg --no-default-keyring --secret-keyring /tmp/sec${ID} --keyring /tmp/pub${ID} --import

# define the -r options for encrypting
export ROPT=$(gpg --list-keys  --no-default-keyring --secret-keyring /tmp/sec${ID} --keyring /tmp/pub${ID} | grep -v 'expired\]' | grep '\<.*@' | cut -d '<' -f2 | cut -d '>' -f1 | sort -u | sed 's/^/-r /') 
echo "Will encrypt for $ROPT"

# encrypt
 gpg  --encrypt --armor $ROPT $IN