#!/bin/bash
MYCRYPT=#directory for stored SSH key encrypted with Keybase
MYSERVER=#SSH server

MYKEY="$(mktemp)"
chmod 600 $MYKEY
printf '%s\n' "Please press the button on your authenticator. We will then write to the file." >&2
head -c 4822 < $1 > $MYKEY
gpg --import $MYKEY
MYPRINT="$(gpg --with-fingerprint --with-colons --list-secret-key | gcut -d':' -f5 | head -n 1)"

printf '%s\n' "Your fingerprint is $MYPRINT. Creating and decrypting identity file..." >&2
MYFILE="$(mktemp)"
chmod 600 $MYFILE
keybase pgp decrypt -i $MYCRYPT > $MYFILE

printf '\n' >&2
printf '%s\n' "=== SSH CREDENTIALS ===" >&2
printf '%s\n' "You may now enter your SSH credentials." >&2
printf '%s\n' "Note that in some cases credentials do not need to be entered." >&2
printf '%s\n' "=== SSH CREDENTIALS ===" >&2
printf '\n' >&2
ssh -i $MYFILE $MYSERVER $2
rm $MYFILE

printf '\n' >&2
printf '%s\n' "=== KEY WIPE ===" >&2
printf '%s\n' "For security reasons, please wipe your key." >&2
printf '%s\n' "Answer yes to the prompts." >&2
printf '%s\n' "=== KEY WIPE ===" >&2
printf '\n' >&2
gpg --delete-secret-key --yes $MYPRINT