#!/bin/sh
# $Id: decrypt-file.sh 396 2005-10-21 20:57:43Z taal $
[ -z "$1" ] && exit 1

file="$1"
# The private key
key="/home/backup-key.enc"

if [ ! -f "$key" ]; then
  echo "Could not find encrypted private key: $key"
  exit 2
fi

backup_file=${file%%.enc}
backup_key="${backup_file}.key"
backup_key_enc="${backup_file}.key.enc"

echo -n "Recovering encryption key..."
openssl rsautl -decrypt -inkey "$key" -in "$backup_key_enc" -out "$backup_key" ||
  {
    echo "Unable to recover encryption key."
    exit 1
  }
echo "done."
echo -n "Decrypting $file..."
openssl enc -d -bf -in "$file" -out "$backup_file" -pass "file:${backup_key}"
echo "done."

ls -la "$backup_file" "$backup_key"