#!/bin/bash

set -e
set -x
HOSTNAME=test.example
EXPIRY=1m
export GNUPGHOME=$(mktemp -d)
cleanup() {
    tail -v "$GNUPGHOME/"{sshcontrol,gpg-agent.log,status}
    rm -rf "$GNUPGHOME"
}
trap cleanup EXIT


cat > "$GNUPGHOME/gpg-agent.conf" <<EOF
batch 
debug-level guru
log-file $GNUPGHOME/gpg-agent.log
EOF
cat >"$GNUPGHOME/gpg.conf" <<EOF
batch
no-tty
status-file $GNUPGHOME/status
with-colons
fixed-list-mode
EOF
gpgconf --launch gpg-agent
ssh-keygen -q -t rsa -N '' -f "$GNUPGHOME/example_ssh_rsa_key"
export SSH_AUTH_SOCK=$(gpgconf --list-dirs agent-ssh-socket)
ssh-add "$GNUPGHOME/example_ssh_rsa_key"
KEYGRIP=$(awk '/^[0-9A-F]/{print $1 }' < "$GNUPGHOME/sshcontrol")
test -n "$KEYGRIP"
gpg --full-generate-key <<EOF
Key-Type: RSA
Key-Grip: $KEYGRIP
Key-Usage: auth
Name-Real: ssh://$HOSTNAME
Expire-Date: $EXPIRY
%no-protection
%commit
EOF
gpg --list-keys "=ssh://$HOSTNAME"
gpg --armor --export "=ssh://$HOSTNAME"
gpg --armor --export-secret-key "=ssh://$HOSTNAME"

+ gpg --armor --export-secret-key =ssh://test.example
gpg: key 6CD93B7E62135C38F5513DACA9FF9D24F6C81E81: error receiving key from agent: Bad secret key - skipped
gpg: WARNING: nothing exported