You've already forked step-ca-cli
mirror of
https://github.com/smallstep/cli.git
synced 2026-10-24 11:19:19 +03:00
step crypto jwe decrypt already accepts --password-file, but the matching encrypt command did not, so encrypting with a PBES2 (password-based) algorithm could only read the password interactively from the TTY. This made automation impossible. Mirror decrypt: add the --password-file flag and seed the password prompt from the file via ui.WithValue when it is set, falling back to the interactive prompt otherwise. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>