[pass] Output from pass generate should go to stderr

Lie Ryan ryan.lie at gecogaming.com
Mon Sep 14 10:06:52 CEST 2015


Currently, the output of `pass generate` cannot be piped into another
command that expects a password because it contains git output and other
interactive outputs. For example:

    openssl genpkey -algorithm RSA -pkeyopt rsa_keygen_bits:2048
-aes-256-cbc -pass file:<(pass example.com.key 30 2>/dev/null) -out
example.com.key

Fails because pass outputs the git commit messages into the named pipe
passed to -pass.

The attachment is rudimentary attempt to send most output from generate
to stderr except the password itself.

Maybe a better implementation is to have an explicit --quiet option?
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Output-from-pass-generate-should-go-to-stderr.patch
Type: text/x-patch
Size: 1095 bytes
Desc: not available
URL: <http://lists.zx2c4.com/pipermail/password-store/attachments/20150914/d979ff89/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: OpenPGP digital signature
URL: <http://lists.zx2c4.com/pipermail/password-store/attachments/20150914/d979ff89/attachment.asc>


More information about the Password-Store mailing list