keynest 0.4.4

Simple, offline, cross-platform secrets manager written in Rust
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34

use anyhow::Result;
use clap::Args;
use std::process::ExitCode;

use super::super::auth;
use crate::commands::Command;
use crate::commands::common::{Argon2Args, resolve_storage};
use keynest::Keynest;

#[derive(Args)]
#[command(after_help = "\
Examples:
  keynest rekey                                  Change the keystore password
  keynest rekey --argon-mem 131072              Change password and upgrade memory cost")]
pub struct RekeyCommand {
    #[command(flatten)]
    pub argon2: Argon2Args,
}

impl Command for RekeyCommand {
    fn run(self, store: Option<std::path::PathBuf>) -> Result<ExitCode> {
        let password = auth::read_password()?;
        let storage = resolve_storage(store)?;
        let mut kn = Keynest::open_with_storage(password, storage)?;

        let new_password = auth::read_new_password_with_confirmation()?;
        let kdf = self.argon2.to_kdf_params()?;
        kn.rekey(new_password, kdf)?;

        println!("store successfully rekeyed");

        Ok(ExitCode::SUCCESS)
    }
}