mogensen / keychain

Bash script to access the osx keychain, for use in shell scripts.

Keychain Access

I got annoyed that:

• I had to write my passwords in cleartext in my scripts, or
• I had to write my password all the time when using my own scrips, when i have this amazing osx keychain.
• The security(1) - Command line interface to the keychain is very hard to use in scripts.

So, I wrote this bash script to allow for easy access to the macOS keychain.

---

Example usage

Google Mail Atom Feed

First add the username and password to the osx keychain:

security add-generic-password -s google -a mogensen -w PaSSW0rd

This adds an entry to the login keychain.

Then use the keychain script to get the username and password:

gmail () {
    USER=`keychain -u -s google`
    PASS=`keychain -p -s google`

     curl -u $USER:$PASS --silent "https://mail.google.com/mail/feed/atom" |  \
  	     perl -ne 'print "\t" if /<name>/; print "$2\n" if /<(title|name)>(.*)<\/\1>/;'
}

Specifying a keychain

Create a new keychain:

security create-keychain -P my-new-keychain

Add a new entry to the keychain:

security add-generic-password -s secret_server -a root -w PaSSW0rd my-new-keychain

Then use the keychain script to get the username and password:

secret_server_api_credentials () {
    USER=`keychain -u -s secret_server -k my-new-keychain`
    PASS=`keychain -p -s secret_server -k my-new-keychain`
    echo $USER:$PASS
}

---

See the man page security(1) Mac OS X Manual Page for more options.