rclone config does not use --password-command when encrypting configuration

[dzoep]

rclone config does not use --password-command when encrypting configuration

[ncw]

Hi @dzoep I've had a first go at this. The --password-command is now used when setting and changing the config password.

It occurs to me that there is no programmatic way to encrypt the config file other than by going through rclone config so maybe we should create that - this would make scripting easier - what do you think?

Please give this a go.

v1.68.0-beta.8123.46b0c7f16.fix-7859-password-command on branch fix-7859-password-command (uploaded in 15-30 mins)

[ncw]

I've implemented command line options to mananage the config file encryption

What do you think of these @dzoep ?

v1.68.0-beta.8262.b0e17c6f8.fix-7859-password-command on branch fix-7859-password-command (uploaded in 15-30 mins)

rclone config encryption set

This command sets or changes the config file encryption password.

If there was no config password set then it sets a new one, otherwise
it changes the existing config password.

Note that if you are changing an encryption password using
--password-command then this will be called once to decrypt the
config using the old password and then again to read the new
password to re-encrypt the config.

When --password-command is called to change the password then the
environment variable RCLONE_PASSWORD_CHANGE=1 will be set. So if
changing passwords programatically you can use the environment
variable to distinguish which password you must supply.

Alternatively you can remove the password first (with rclone config encryption remove), then set it again with this command which may be
easier if you don't mind the unecrypted config file being on the disk
briefly.

Usage:
  rclone config encryption set [flags]

Flags:
  -h, --help   help for set

rclone config encryption remove

Remove the config file encryption password

This removes the config file encryption, returning it to un-encrypted.

If --password-command is in use, this will be called to supply the old config
password.

If the config was not encrypted then no error will be returned and
this command will do nothing.

Usage:
  rclone config encryption remove [flags]

Flags:
  -h, --help   help for remove

rclone config encryption check

This checks the config file is encrypted and that you can decrypt it.

It will attempt to decrypt the config using the password you supply.

If decryption fails it will return a non-zero exit code if using
--password-command, otherwise it will prompt again for the password.

If the config file is not encrypted it will return a non zero exit code.

Usage:
  rclone config encryption check [flags]

Flags:
  -h, --help   help for check

[ncw]

Thank you for testing :-)

I've merged this to master now which means it will be in the latest beta in 15-30 minutes and released in v1.68