rekey

#! /bin/bash

set -e

DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )"
FILES=`find $1 -name "*gpg"`

echo "I am about to decrypt and re-encrypt the following files, with the current
set of public keys.

$FILES

Any existing plaintext in the checkout will be lost. Do you wish to continue? (y/n) "

read -n 1 -r
if [[ ! $REPLY =~ ^[Yy]$ ]]
then
	printf '\n'
	exit 0
fi

for FILE in $FILES;
do
	gpg --batch --skip-verify --yes $FILE
	DECRYPTED=`echo $FILE | sed s/\.[^\.]*$//`
	$DIR/encrypt $DECRYPTED
	srm $DECRYPTED
done