Using oathtool in Emacs - was Re: Backticks in Eshell

[Jean Louis]

* Felix E. Klee <felix.klee@inka.de> [2021-09-30 10:07]:
> To generate a one time password, I would do in Bash:
> 
>     oathtool -b --totp `gpg -d secret.gpg`
> 
> How do I do the equivalent in Eshell?
> 
> I tried:
> 
>     oathtool -b --totp ${gpg -d secret.gpg}
> 
> But that doesn’t work.  Even the following doesn’t work:
> 
>     echo ${gpg -h}
> 
> I expect GnuPG’s help text, but there’s no output.

I understand what you mean, but personally I don't keep it a secret in
my $HOME directory:

- all of the /home is encrypted, and I decrypt it manually when
  starting a computer. I do not let it to operating system to attempt
  decrypting it and asking me for the password. In general, an
  intruder who gets my computer without my presence (and this did
  happen) does not need to know there is anything encrypted on
  computer.

- when I decrypt partition, then I have passwords pretty much plain in
  ~/.passwords or in the database (again easily decrypted). Database
  is on encrypted partition too and is started upon decryption of
  $HOME, /tmp and swap partitions must be on randomly encrypted
  partitions. Email is not delivered in /var, it is fetched from
  Internet to $HOME. 

Then I keep the oath-keys in a list:

(defvar oath-keys '(digitalocean "3O1MLC2RYJ5VRDHB" ces 
"N1YWQ5C3OEXCGWTNLNTUQ2J2FAQXGNTU" namecheap 
"TW1N5TRK22QOHELVGMBTARV74XYET6HH"))

(defun call-process-to-string (program &optional infile display &rest args)
  (with-temp-buffer
    (apply #'call-process program infile t display args)
    (buffer-string)))

(defun oath ()
  (interactive)
  (let* ((key (rcd-choose (map-keys oath-keys) "OATH Service: "))
         (result (call-process-to-string "oathtool" nil nil "-b" "--totp=sha1" 
(plist-get oath-keys (intern "ces"))))
         (result (string-trim result)))
    (message result)
    (kill-new result)))

And I ask interactively for it with M-x oath 

However, the above function does NOT result with same key when I run
it from Emacs and I would like to find out why. Maybe it uses
different time, I cannot know, it still does not work. Somebody can
help? 

Otherwise in shell, I keep those few authentications as alias,
straight as following:

alias totp-digitalocean='oathtool -b --totp=sha1 3O1MLC2RYJ5VRDHB'

So I just run the alias and get the authentication key.



-- 
Jean

Take action in Free Software Foundation campaigns:
https://www.fsf.org/campaigns

In support of Richard M. Stallman
https://stallmansupport.org/