#!/bin/bash

# server address (todo:  add an option to set it on command line)
server=127.0.0.1/stockmarket-server.cgi

# private key
# you can generate one with:  openssl genrsa -out rsa-test 2048
# public key can be obtained with:  openssl rsa -pubout -in rsa-test
privkey="rsa-test"

# message is given on command line
message="$@"

# Message authentication code is a random number appended to unix EPOC
mac=$(bc <<<"$(date +%s)+$RANDOM")

# base64 JSON data
data="$(base64 -w 0 <<<"{ \"message\": \"$message\", \"mac\": $mac }")"

# base64 whirlpool signature
signature="$(openssl dgst -whirlpool -sign $privkey <<< "$data" |base64 -w 0)"

# sending via POST method
wget -q -O - --post-data "data=\"$data\" signature=\"$signature\" pubkey=\"$(openssl rsa -pubout -in $privkey)\"" http://$server

#!/bin/bash

echo "Content-type:     text/plain"
echo

echo stock market exchange server
echo

if [[ "$REQUEST_METHOD" = "POST" ]] && [[ "$CONTENT_LENGTH" -gt 0 ]]
then
    read -N $CONTENT_LENGTH POST_DATA <&0

    # todo:  retrieve post data more securely than using "eval"
    eval "$POST_DATA"

    if openssl dgst -whirlpool -signature <(base64 -d <<<"$signature") -verify <(echo "$pubkey") <<<"$data" 2>&1
    then
        data="$(base64 -d <<<"$data")"
        echo "$data"
    else
        echo wrong signature
    fi

else
    echo no data received
fi

#!/bin/bash

# server address (todo:  add an option to set it on command line)
server=127.0.0.1

# private key
# you can generate one with:  openssl genrsa -out rsa-test 2048
# public key can be obtained with:  openssl rsa -pubout -in rsa-test
privkey="rsa-test"

# message is given on command line
message="$@"

# Message authentication code is a random number appended to unix EPOC
mac=$(bc <<<"$(date +%s)+$RANDOM")

data="$(base64 <<<"{ \"message\": \"$message\", \"mac\": $mac }")"

signature="$(openssl rsautl -sign -inkey $privkey -in <(echo "$data") |base64)"

wget -O - --post-data "data=$data&signature=$signature" http://$server

wget -O - --post-data "data=$data&signature=$signature&pubkey=$(openssl rsa -pubout -in $privkey)" http://$server

#!/bin/bash

name=grondilu
sftp_address=grondilu@somewhere.fr
email=grondilu@nospam.fr
bluetoothaddr="00:XX:YY:ZZ:UU:TT"

private="$HOME/Private"
backup="wallet-$(date +%s).dat"

error() {
    echo $1 returned error code $2
    rm -f $private/"$backup"{,.gpg}
    exit $2
}

if
    echo -n "making backup file..."
    bitcoind backupwallet "$private/$backup"
    r=$? ; ((r != 0))
then error bitcoind $r
elif
    echo ok
    cd $private
    echo -n "encrypting..."
    gpg -e -r $name "$backup" 
    r=$? ; ((r != 0))
then error gpg $r
elif
    echo ok
    rm "$backup"
    echo -n "copying to distant server..."
    scp "$backup.gpg" $sftp_address:
    r=$? ; ((r != 0))
then error scp $r
elif
    echo ok
    echo -n "adding to distant archive..."
    ssh $sftp_address <<< "tar rf wallet-backup.tar $backup.gpg && rm $backup.gpg"
    r=$? ; ((r != 0))
then error ssh $r
elif
    echo ok
    echo -n "copying to smartphone..."
    obexftp -b "$bluetoothaddr" -c /Data/backups -p "$backup.gpg"
    r=$? ; ((r != 0))
then error obexftp $r
elif
    echo ok
    echo -n "sending backup via email..."
    mutt $email -s backup -a $backup.gpg < /dev/null
    r=$? ; ((r != 0))
then error mutt $r
else
    echo ok
    rm "$backup.gpg"
fi