encrypt-file cannot be used for multiple files

[BanzaiMan]

It seems impossible to use encrypt-file on multiple files.

One can run the command multiple times on different files, but the later invocation overwrites the secure environment variables, invalidating the earlier encryptions.

I suspect -K and -iv flags are meant to overcome this, but it fails as follows:

$ travis encrypt-file --skip-version-check -K 7b758bbf041361268b192d816d60ec84907106015402f31fdc5ae165fdce0979 -iv 7aaf728695ac967003d5345d9be63924 foo1                                                        
travis: version unknown

[rkh]

I don't know where the "version unknown" is coming from. -K and -iv should not be used in the normal workflow, even for multiple files.

Each file should have its own set of variables (that's why there's a hash in the var name). Do you have an example for this failing?

[mfornasa]

+1

[chris-redekop]

+1

[rayshan]

+1

Here's an example of encrypting multiple files failing:
https://travis-ci.org/rayshan/ga-extractor/builds/41199310

Note that I ran encrypt-file multiple times, every time seem to generate a new key / iv pair seen from the -p flag. On Travis CI only 1 pair of key / iv is saved.

[grahamc]

+1

[pirog]

+1

[BanzaiMan]

I don't think we can pull the decrypted key and iv values once they are uploaded.

Workaround

Create an archive of sensitive files, and encrypt this archive. In your before_install section, you'd decrypt it, and expand the archive.

$ tar cvf secrets.tar foo bar
$ travis encrypt-file secrets.tar
$ vi .travis.yml
$ git add secrets.tar.enc .travis.yml
$ git commit -m 'use secret archive'
$ git push

before_install:
  - openssl aes-256-cbc -K $encrypted_5880cf525281_key -iv $encrypted_5880cf525281_iv -in secrets.tar.enc -out secrets.tar -d
  - tar xvf secrets.tar

The management might be a little cumbersome still.

[BanzaiMan]

I've added the above workarounds to http://docs.travis-ci.com/user/encrypting-files/#Encrypting-multiple-files.

[svenfuchs]

For reference, this should be fixed in #678